Microsoft
Page 71 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25922 | Medium | 4.3 | 2024-02-28 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 allows the attacker to upload or transfer files of dangerous types that can be auto… |
CVE-2024-27099 | Critical | 9.8 | 2024-02-27 | The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. When processing an incorrect `AMQP_VALUE` failed state, may cause a double free pr… |
CVE-2023-48682 | Medium | 5.4 | 2024-02-27 | Stored cross-site scripting (XSS) vulnerability in unit name. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391. |
CVE-2023-48681 | Medium | 6.1 | 2024-02-27 | Self cross-site scripting (XSS) vulnerability in storage nodes search field. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) bef… |
CVE-2023-48680 | Medium | 5.5 | 2024-02-27 | Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect 16 (macOS, Windo… |
CVE-2023-48679 | Medium | 5.4 | 2024-02-27 | Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16… |
CVE-2023-48678 | Medium | 5.5 | 2024-02-27 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before buil… |
CVE-2024-0819 | High | 7.3 | 2024-02-27 | Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to ele… |
CVE-2024-0197 | High | 7.8 | 2024-02-27 | A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access. |
CVE-2023-7016 | High | 7.8 | 2024-02-27 | A flaw in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to execute code at a SYSTEM level via local access. |
CVE-2023-5993 | High | 7.8 | 2024-02-27 | A flaw in the Windows Installer in Thales SafeNet Authentication Client prior to 10.8 R10 on Windows allows an attacker to escalate their privilege level via l… |
CVE-2024-26192 | High | 8.2 | 2024-02-23 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2024-26188 | Medium | 4.3 | 2024-02-23 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-21423 | Medium | 4.8 | 2024-02-23 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2022-43842 | High | 8.6 | 2024-02-23 | IBM Aspera Console 3.4.0 through 3.4.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the att… |
CVE-2024-0715 | High | 7.6 | 2024-02-20 | Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: bef… |
CVE-2024-20749 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20748 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20747 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20739 | High | 7.8 | 2024-02-15 | Audition versions 24.0.3, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co… |
CVE-2024-20738 | Critical | 9.8 | 2024-02-15 | Adobe FrameMaker Publishing Server versions 2022.1 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature… |
CVE-2024-20736 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20735 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive m… |
CVE-2024-20734 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory… |
CVE-2024-20733 | Medium | 5.5 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application den… |
CVE-2024-20731 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-20730 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary c… |
CVE-2024-20729 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in… |
CVE-2024-20728 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-20727 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2024-20726 | High | 7.8 | 2024-02-15 | Acrobat Reader versions 20.005.30539, 23.008.20470 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code executi… |
CVE-2023-50387 | High | 7.5 | 2024-02-14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumpti… |
CVE-2024-21420 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21413 | Critical | 9.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-21412 | High | 8.1 | 2024-02-13 | Internet Shortcut Files Security Feature Bypass Vulnerability |
CVE-2024-21410 | Critical | 9.8 | 2024-02-13 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2024-21406 | High | 7.5 | 2024-02-13 | Windows Printing Service Spoofing Vulnerability |
CVE-2024-21405 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21404 | High | 7.5 | 2024-02-13 | .NET Denial of Service Vulnerability |
CVE-2024-21403 | Critical | 9.0 | 2024-02-13 | Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability |
CVE-2024-21402 | High | 7.1 | 2024-02-13 | Microsoft Outlook Elevation of Privilege Vulnerability |
CVE-2024-21401 | Critical | 9.8 | 2024-02-13 | Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability |
CVE-2024-21397 | Medium | 5.3 | 2024-02-13 | Microsoft Azure File Sync Elevation of Privilege Vulnerability |
CVE-2024-21396 | High | 7.6 | 2024-02-13 | Dynamics 365 Sales Spoofing Vulnerability |
CVE-2024-21395 | High | 8.2 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21394 | High | 7.6 | 2024-02-13 | Dynamics 365 Field Service Spoofing Vulnerability |
CVE-2024-21393 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21391 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21389 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2024-21386 | High | 7.5 | 2024-02-13 | .NET Denial of Service Vulnerability |
CVE-2024-21384 | High | 7.8 | 2024-02-13 | Microsoft Office OneNote Remote Code Execution Vulnerability |
CVE-2024-21381 | Medium | 6.8 | 2024-02-13 | Microsoft Azure Active Directory B2C Spoofing Vulnerability |
CVE-2024-21380 | High | 8.0 | 2024-02-13 | Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability |
CVE-2024-21379 | High | 7.8 | 2024-02-13 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2024-21378 | High | 8.8 | 2024-02-13 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2024-21377 | Medium | 5.5 | 2024-02-13 | Windows DNS Information Disclosure Vulnerability |
CVE-2024-21376 | Critical | 9.0 | 2024-02-13 | Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability |
CVE-2024-21375 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21374 | Medium | 5.0 | 2024-02-13 | Microsoft Teams for Android Information Disclosure Vulnerability |
CVE-2024-21372 | High | 8.8 | 2024-02-13 | Windows OLE Remote Code Execution Vulnerability |
CVE-2024-21371 | High | 7.0 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21370 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21369 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21368 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21367 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21366 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21365 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21364 | Critical | 9.3 | 2024-02-13 | Microsoft Azure Site Recovery Elevation of Privilege Vulnerability |
CVE-2024-21363 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2024-21362 | Medium | 5.5 | 2024-02-13 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2024-21361 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21360 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21359 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21358 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21357 | High | 8.1 | 2024-02-13 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2024-21356 | Medium | 6.5 | 2024-02-13 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2024-21355 | High | 7.0 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21354 | High | 7.8 | 2024-02-13 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2024-21353 | High | 8.8 | 2024-02-13 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21352 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21351 | High | 7.6 | 2024-02-13 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2024-21350 | High | 8.8 | 2024-02-13 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2024-21349 | High | 8.8 | 2024-02-13 | Microsoft ActiveX Data Objects Remote Code Execution Vulnerability |
CVE-2024-21348 | High | 7.5 | 2024-02-13 | Internet Connection Sharing (ICS) Denial of Service Vulnerability |
CVE-2024-21347 | High | 7.5 | 2024-02-13 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2024-21346 | High | 7.8 | 2024-02-13 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-21345 | High | 8.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21344 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21343 | Medium | 5.9 | 2024-02-13 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2024-21342 | High | 7.5 | 2024-02-13 | Windows DNS Client Denial of Service Vulnerability |
CVE-2024-21341 | Medium | 6.8 | 2024-02-13 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2024-21340 | Medium | 4.6 | 2024-02-13 | Windows Kernel Information Disclosure Vulnerability |
CVE-2024-21339 | Medium | 6.4 | 2024-02-13 | Windows USB Generic Parent Driver Remote Code Execution Vulnerability |
CVE-2024-21338 | High | 7.8 | 2024-02-13 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-21329 | High | 7.3 | 2024-02-13 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2024-21328 | High | 7.6 | 2024-02-13 | Dynamics 365 Sales Spoofing Vulnerability |
CVE-2024-21327 | High | 7.6 | 2024-02-13 | Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability |
CVE-2024-21315 | High | 7.8 | 2024-02-13 | Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability |
CVE-2024-21304 | Medium | 4.1 | 2024-02-13 | Trusted Compute Base Elevation of Privilege Vulnerability |
CVE-2024-20695 | Medium | 5.7 | 2024-02-13 | Skype for Business Information Disclosure Vulnerability |