Microsoft
Page 74 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35631 | High | 7.8 | 2023-12-12 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-35630 | High | 8.8 | 2023-12-12 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
CVE-2023-35629 | Medium | 6.8 | 2023-12-12 | Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability |
CVE-2023-35628 | High | 8.1 | 2023-12-12 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2023-35625 | Medium | 4.7 | 2023-12-12 | Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability |
CVE-2023-35624 | High | 7.3 | 2023-12-12 | Azure Connected Machine Agent Elevation of Privilege Vulnerability |
CVE-2023-35622 | High | 7.5 | 2023-12-12 | Windows DNS Spoofing Vulnerability |
CVE-2023-35621 | High | 7.5 | 2023-12-12 | Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability |
CVE-2023-35619 | Medium | 5.3 | 2023-12-12 | Microsoft Outlook for Mac Spoofing Vulnerability |
CVE-2023-21740 | High | 7.8 | 2023-12-12 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-48677 | High | 7.8 | 2023-12-12 | Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40… |
CVE-2023-38174 | Medium | 4.3 | 2023-12-07 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2023-36880 | Medium | 4.8 | 2023-12-07 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2023-35618 | Critical | 9.6 | 2023-12-07 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-48861 | High | 7.8 | 2023-12-07 | DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll. |
CVE-2023-49283 | Medium | 5.4 | 2023-12-05 | microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which contained test code that enabled the use of… |
CVE-2023-49282 | Medium | 5.4 | 2023-12-05 | msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the ph… |
CVE-2023-48693 | High | 8.7 | 2023-12-05 | Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications. An attacker can cause arbitrary re… |
CVE-2023-48692 | Critical | 9.0 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-48691 | High | 8.1 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds… |
CVE-2023-48316 | Critical | 9.8 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-48315 | High | 8.8 | 2023-12-05 | Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execu… |
CVE-2023-5808 | High | 7.6 | 2023-12-05 | SMU versions prior to 14.8.7825.01 are susceptible to unintended information disclosure, through URL manipulation. Authenticated users in a Storage administrat… |
CVE-2023-41613 | High | 7.8 | 2023-12-04 | EzViz Studio v2.2.0 is vulnerable to DLL hijacking. |
CVE-2023-40687 | Medium | 5.3 | 2023-12-04 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS com… |
CVE-2023-38727 | Medium | 5.3 | 2023-12-04 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statemen… |
CVE-2023-29258 | Medium | 5.3 | 2023-12-04 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated que… |
CVE-2023-47701 | Medium | 6.5 | 2023-12-04 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM… |
CVE-2023-46167 | Medium | 5.9 | 2023-12-04 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 federated server is vulnerable to a denial of service when a specially crafted cursor is… |
CVE-2023-46174 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2023-43021 | Medium | 5.3 | 2023-12-01 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in th… |
CVE-2023-42022 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web… |
CVE-2023-42019 | Medium | 5.9 | 2023-12-01 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161… |
CVE-2023-42009 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2023-40699 | High | 7.5 | 2023-12-01 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to cause a denial of service due to improper input validation. IBM X-Force ID: 265161… |
CVE-2023-43015 | Medium | 5.4 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2023-38268 | Medium | 4.3 | 2023-12-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions… |
CVE-2023-45253 | High | 7.8 | 2023-12-01 | An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attackers to manipulate files and escalate privi… |
CVE-2023-45252 | High | 7.8 | 2023-12-01 | DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directo… |
CVE-2023-4770 | Medium | 6.5 | 2023-11-30 | An uncontrolled search path element vulnerability has been found on 4D and 4D server Windows executables applications, affecting version 19 R8 100218. This vul… |
CVE-2023-6345 | Critical | 9.6 | 2023-11-29 | Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2023-24023 | Medium | 6.8 | 2023-11-28 | Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-mid… |
CVE-2023-49322 | High | 7.5 | 2023-11-27 | Certain WithSecure products allow a Denial of Service because there is an unpack handler crash that can lead to a scanning engine crash. This affects WithSecur… |
CVE-2023-49321 | Medium | 5.3 | 2023-11-27 | Certain WithSecure products allow a Denial of Service because scanning a crafted file takes a long time, and causes the scanner to hang. This affects WithSecur… |
CVE-2023-4595 | High | 7.5 | 2023-11-23 | An information exposure vulnerability has been found, the exploitation of which could allow a remote user to retrieve sensitive information stored on the serve… |
CVE-2023-4594 | Medium | 6.1 | 2023-11-23 | Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in… |
CVE-2023-4593 | Medium | 6.5 | 2023-11-23 | Path traversal vulnerability whose exploitation could allow an authenticated remote user to bypass SecurityManager's intended restrictions and list a parent di… |
CVE-2023-46814 | High | 7.8 | 2023-11-22 | A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated p… |
CVE-2023-36013 | Medium | 6.5 | 2023-11-20 | PowerShell Information Disclosure Vulnerability |
CVE-2023-40363 | High | 8.1 | 2023-11-18 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to change installation files due to incorrect file permission settings. IBM X-Force I… |
CVE-2023-44324 | Critical | 9.8 | 2023-11-17 | Adobe FrameMaker Publishing Server versions 2022 and earlier are affected by an Improper Authentication vulnerability that could result in a Security feature b… |
CVE-2023-22275 | High | 7.5 | 2023-11-17 | Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnera… |
CVE-2023-22274 | High | 7.5 | 2023-11-17 | Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could lead… |
CVE-2023-22273 | High | 7.2 | 2023-11-17 | Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability… |
CVE-2023-22272 | High | 7.5 | 2023-11-17 | Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to information disclosure by an unau… |
CVE-2023-22268 | Medium | 6.5 | 2023-11-17 | Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnera… |
CVE-2023-47073 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2023-47072 | Low | 3.3 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to dis… |
CVE-2023-47071 | Medium | 5.5 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-47070 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2023-47069 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47068 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47067 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47066 | High | 7.8 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-44326 | Medium | 5.5 | 2023-11-17 | Adobe Dimension versions 3.4.9 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-44325 | Medium | 5.5 | 2023-11-17 | Adobe Animate versions 23.0.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-36026 | Medium | 4.3 | 2023-11-16 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-36008 | Medium | 6.6 | 2023-11-16 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-47060 | Low | 3.3 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclo… |
CVE-2023-47059 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou… |
CVE-2023-47058 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which cou… |
CVE-2023-47057 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code e… |
CVE-2023-47056 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-47055 | High | 7.8 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code executi… |
CVE-2023-47054 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosu… |
CVE-2023-47053 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosu… |
CVE-2023-47052 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensiti… |
CVE-2023-47051 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary co… |
CVE-2023-47050 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could… |
CVE-2023-47049 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could… |
CVE-2023-47048 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could… |
CVE-2023-47047 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitr… |
CVE-2023-47046 | Medium | 5.5 | 2023-11-16 | Adobe Audition version 24.0 (and earlier) and 23.6.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2023-26368 | High | 7.8 | 2023-11-16 | Adobe InCopy versions 18.5 (and earlier) and 17.4.2 (and earlier) are affected by are affected by an out-of-bounds read vulnerability when parsing a crafted fi… |
CVE-2023-47044 | Medium | 5.5 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to dis… |
CVE-2023-47043 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-47042 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitra… |
CVE-2023-47041 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2023-47040 | High | 7.8 | 2023-11-16 | Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which… |
CVE-2023-44335 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44334 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44333 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44332 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44331 | Medium | 5.5 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensi… |
CVE-2023-44330 | High | 7.8 | 2023-11-16 | Adobe Photoshop versions 24.7.1 (and earlier) and 25.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code e… |
CVE-2023-44329 | Medium | 5.5 | 2023-11-16 | Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclos… |
CVE-2023-44328 | Medium | 5.5 | 2023-11-16 | Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive m… |
CVE-2023-44327 | Medium | 5.5 | 2023-11-16 | Adobe Bridge versions 13.0.4 (and earlier) and 14.0.0 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclos… |
CVE-2023-44372 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44371 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |