Microsoft
Page 72 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-20684 | Medium | 6.5 | 2024-02-13 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20679 | Medium | 6.5 | 2024-02-13 | Azure Stack Hub Spoofing Vulnerability |
CVE-2024-20673 | High | 7.8 | 2024-02-13 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2024-20667 | High | 7.5 | 2024-02-13 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2024-25110 | Critical | 9.8 | 2024-02-12 | The UAMQP is a general purpose C library for AMQP 1.0. During a call to open_get_offered_capabilities, a memory allocation may fail causing a use-after-free is… |
CVE-2023-47131 | High | 7.5 | 2024-02-08 | The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file. |
CVE-2024-1149 | High | 7.8 | 2024-02-08 | Improper Verification of Cryptographic Signature vulnerability in Snow Software Inventory Agent on MacOS, Snow Software Inventory Agent on Windows, Snow Softwa… |
CVE-2024-23769 | High | 7.3 | 2024-02-07 | Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 (for Windows) allows a local attacker to read privileged data. |
CVE-2024-25140 | Critical | 9.8 | 2024-02-06 | A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Co… |
CVE-2023-32479 | Medium | 6.7 | 2024-02-06 | Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerabil… |
CVE-2020-24682 | High | 7.2 | 2024-02-02 | Unquoted Search Path or Element vulnerability in B&R Industrial Automation Automation Studio, B&R Industrial Automation NET/PVI allows Target Programs with Ele… |
CVE-2020-24681 | High | 8.2 | 2024-02-02 | Incorrect Permission Assignment for Critical Resource vulnerability in B&R Industrial Automation Automation Studio allows Privilege Escalation.This issue affec… |
CVE-2024-24482 | Critical | 9.8 | 2024-02-02 | Aprktool before 2.9.3 on Windows allows ../ and /.. directory traversal. |
CVE-2024-21399 | High | 8.3 | 2024-02-02 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2024-0589 | Medium | 5.4 | 2024-01-31 | Cross-site scripting (XSS) vulnerability in the entry overview tab in Devolutions Remote Desktop Manager 2023.3.36 and earlier on Windows allows an attacker wi… |
CVE-2024-21388 | Medium | 6.5 | 2024-01-30 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-4554 | Medium | 4.9 | 2024-01-29 | Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System F… |
CVE-2023-4553 | Medium | 5.3 | 2024-01-29 | Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. AppBuilder configuration files are viewable by un… |
CVE-2023-4552 | Medium | 5.5 | 2024-01-29 | Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability… |
CVE-2023-4551 | High | 7.2 | 2024-01-29 | Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that fa… |
CVE-2023-4550 | High | 7.5 | 2024-01-29 | Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files… |
CVE-2024-23940 | High | 7.8 | 2024-01-29 | Trend Micro uiAirSupport, included in the Trend Micro Security 2023 family of consumer products, version 6.0.2092 and below is vulnerable to a DLL hijacking/pr… |
CVE-2024-23441 | Medium | 5.5 | 2024-01-29 | Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver. |
CVE-2024-21336 | Low | 2.5 | 2024-01-26 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-21387 | Medium | 5.3 | 2024-01-26 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2024-21385 | High | 8.3 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-21383 | Low | 3.3 | 2024-01-26 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2024-21382 | Medium | 4.3 | 2024-01-26 | Microsoft Edge for Android Information Disclosure Vulnerability |
CVE-2024-21326 | Critical | 9.6 | 2024-01-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-3181 | High | 7.8 | 2024-01-25 | The C:\Program Files (x86)\Splashtop\Splashtop Software Updater\uninst.exe process creates a folder at C:\Windows\Temp~nsu.tmp and copies itself to it as Au_.e… |
CVE-2023-47141 | Medium | 5.3 | 2024-01-22 | IIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 could allow an authenticated user with CONNECT privileges to cause a denial of service… |
CVE-2023-47747 | Medium | 5.3 | 2024-01-22 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated user with CONNECT privileges to cause a den… |
CVE-2023-47158 | Medium | 5.3 | 2024-01-22 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1 and 11.5 could allow an authenticated user with CONNECT privileges to cause a… |
CVE-2023-47152 | Medium | 5.9 | 2024-01-22 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to an insecure cryptographic algorithm and to information disclosure in st… |
CVE-2023-27859 | Medium | 6.5 | 2024-01-22 | IBM Db2 10.1, 10.5, and 11.1 could allow a remote user to execute arbitrary code caused by installing like named jar files across multiple databases. A user c… |
CVE-2023-50308 | Medium | 6.5 | 2024-01-22 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 under certain circumstances could allow an authenticated user to the database to cause a… |
CVE-2023-47746 | Medium | 5.3 | 2024-01-22 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 could allow an authenticated user with CONNECT privileges to cause a den… |
CVE-2023-45193 | Medium | 5.9 | 2024-01-22 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is… |
CVE-2024-0770 | Medium | 4.4 | 2024-01-21 | A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown function of the file… |
CVE-2024-23331 | High | 7.5 | 2024-01-19 | Vite is a frontend tooling framework for javascript. The Vite dev server option `server.fs.deny` can be bypassed on case-insensitive file systems using case-au… |
CVE-2024-0725 | Medium | 5.3 | 2024-01-19 | A vulnerability was found in ProSSHD 1.2 on Windows. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to de… |
CVE-2024-0723 | Medium | 5.3 | 2024-01-19 | A vulnerability was found in freeSSHd 1.0.9 on Windows. It has been classified as problematic. This affects an unknown part. The manipulation leads to denial o… |
CVE-2023-40683 | High | 8.8 | 2024-01-19 | IBM OpenPages with Watson 8.3 and 9.0 could allow remote attacker to bypass security restrictions, caused by insufficient authorization checks. By authenticati… |
CVE-2023-38738 | Medium | 6.8 | 2024-01-19 | IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is usin… |
CVE-2023-35020 | Medium | 5.4 | 2024-01-19 | IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request c… |
CVE-2024-22410 | Low | 3.3 | 2024-01-17 | Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsof… |
CVE-2023-6335 | Medium | 6.4 | 2024-01-16 | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue aff… |
CVE-2023-6334 | Medium | 5.3 | 2024-01-16 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue af… |
CVE-2023-5097 | High | 7.0 | 2024-01-16 | Improper Input Validation vulnerability in HYPR Workforce Access on Windows allows Path Traversal.This issue affects Workforce Access: before 8.7. |
CVE-2023-49107 | Medium | 5.3 | 2024-01-16 | Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent modules).This issu… |
CVE-2023-49106 | Medium | 4.6 | 2024-01-16 | Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component).This issue affects Hitachi Device Man… |
CVE-2024-20721 | Medium | 5.5 | 2024-01-15 | Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could… |
CVE-2024-20709 | Medium | 5.5 | 2024-01-15 | Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could… |
CVE-2023-49647 | High | 8.8 | 2024-01-12 | Improper access control in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows before version 5.16.10 may allow an authenti… |
CVE-2023-31036 | High | 7.5 | 2024-01-12 | NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-contr… |
CVE-2023-40250 | High | 8.8 | 2024-01-12 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Hancom HCell on Windows allows Overflow Buffers.This issue affects HCel… |
CVE-2024-21337 | Medium | 5.2 | 2024-01-11 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2024-20675 | Medium | 6.3 | 2024-01-11 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-51751 | Medium | 6.8 | 2024-01-11 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because Alt-F4 can be used. This is fixed in 10.5.7 by preventing the launching of the… |
CVE-2023-51750 | Medium | 4.6 | 2024-01-11 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because file downloads can occur. NOTE: the vendor's position is "Not vulnerable if th… |
CVE-2024-21638 | Critical | 9.1 | 2024-01-10 | Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address sp… |
CVE-2024-20715 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20714 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20713 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20712 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20711 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-20710 | Medium | 5.5 | 2024-01-10 | Adobe Substance 3D Stager versions 2.1.3 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2024-0310 | Medium | 6.1 | 2024-01-10 | A content-security-policy vulnerability in ENS Control browser extension prior to 10.7.0 Update 15 allows a remote attacker to alter the response header param… |
CVE-2024-21643 | High | 7.1 | 2024-01-10 | IdentityModel Extensions for .NET provide assemblies for web developers that wish to use federated identity providers for establishing the caller's identity. A… |
CVE-2024-21319 | Medium | 6.8 | 2024-01-09 | Microsoft Identity Denial of service vulnerability |
CVE-2024-21325 | High | 7.8 | 2024-01-09 | Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability |
CVE-2024-21320 | Medium | 6.5 | 2024-01-09 | Windows Themes Spoofing Vulnerability |
CVE-2024-21318 | High | 8.8 | 2024-01-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2024-21316 | Medium | 6.1 | 2024-01-09 | Windows Server Key Distribution Service Security Feature Bypass |
CVE-2024-21314 | Medium | 6.5 | 2024-01-09 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2024-21313 | Medium | 5.3 | 2024-01-09 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2024-21312 | High | 7.5 | 2024-01-09 | .NET Framework Denial of Service Vulnerability |
CVE-2024-21311 | Medium | 5.5 | 2024-01-09 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2024-21310 | High | 7.8 | 2024-01-09 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2024-21309 | High | 7.8 | 2024-01-09 | Windows Kernel-Mode Driver Elevation of Privilege Vulnerability |
CVE-2024-21307 | High | 7.5 | 2024-01-09 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2024-21306 | Medium | 5.7 | 2024-01-09 | Microsoft Bluetooth Driver Spoofing Vulnerability |
CVE-2024-21305 | Medium | 4.4 | 2024-01-09 | Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability |
CVE-2024-20700 | High | 7.5 | 2024-01-09 | Windows Hyper-V Remote Code Execution Vulnerability |
CVE-2024-20699 | Medium | 5.5 | 2024-01-09 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2024-20698 | High | 7.8 | 2024-01-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2024-20697 | High | 7.3 | 2024-01-09 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-20696 | High | 7.3 | 2024-01-09 | Windows libarchive Remote Code Execution Vulnerability |
CVE-2024-20694 | Medium | 5.5 | 2024-01-09 | Windows CoreMessaging Information Disclosure Vulnerability |
CVE-2024-20692 | Medium | 5.7 | 2024-01-09 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2024-20691 | Medium | 4.7 | 2024-01-09 | Windows Themes Information Disclosure Vulnerability |
CVE-2024-20690 | Medium | 6.5 | 2024-01-09 | Windows Nearby Sharing Spoofing Vulnerability |
CVE-2024-20687 | High | 7.5 | 2024-01-09 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2024-20686 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20683 | High | 7.8 | 2024-01-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2024-20682 | High | 7.8 | 2024-01-09 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2024-20681 | High | 7.8 | 2024-01-09 | Windows Subsystem for Linux Elevation of Privilege Vulnerability |
CVE-2024-20680 | Medium | 6.5 | 2024-01-09 | Windows Message Queuing Client (MSMQC) Information Disclosure |
CVE-2024-20677 | High | 7.8 | 2024-01-09 | A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disab… |
CVE-2024-20676 | High | 8.0 | 2024-01-09 | Azure Storage Mover Remote Code Execution Vulnerability |