Microsoft
Page 75 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44367 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44366 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-44365 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that c… |
CVE-2023-44361 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2023-44360 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44359 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-44358 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44357 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44356 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44348 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44340 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44339 | Medium | 5.5 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-44338 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-44337 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-44336 | High | 7.8 | 2023-11-16 | Adobe Acrobat Reader versions 23.006.20360 (and earlier) and 20.005.30524 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-39246 | Medium | 4.6 | 2023-11-16 | Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows… |
CVE-2023-47264 | High | 7.5 | 2023-11-16 | Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS). This affects WithSecure Cli… |
CVE-2023-47263 | High | 7.5 | 2023-11-16 | Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file. This affects WithSecure Client Security 1… |
CVE-2023-6105 | Medium | 5.5 | 2023-11-15 | An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user wit… |
CVE-2023-41718 | High | 7.8 | 2023-11-15 | When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a… |
CVE-2023-38543 | High | 7.8 | 2023-11-15 | A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulne… |
CVE-2023-38043 | High | 7.8 | 2023-11-15 | A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulne… |
CVE-2023-35080 | High | 7.8 | 2023-11-15 | A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable conf… |
CVE-2023-36558 | Medium | 6.2 | 2023-11-14 | ASP.NET Core Security Feature Bypass Vulnerability |
CVE-2023-36038 | High | 8.2 | 2023-11-14 | ASP.NET Core Denial of Service Vulnerability |
CVE-2023-5528 | High | 7.2 | 2023-11-14 | A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privil… |
CVE-2023-36437 | High | 8.8 | 2023-11-14 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2023-36049 | High | 7.6 | 2023-11-14 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-36007 | High | 7.6 | 2023-11-14 | Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability |
CVE-2023-39412 | Medium | 5.4 | 2023-11-14 | Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. |
CVE-2023-39411 | Medium | 5.0 | 2023-11-14 | Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2023-39228 | Medium | 5.3 | 2023-11-14 | Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2023-39221 | Medium | 5.4 | 2023-11-14 | Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. |
CVE-2023-38570 | Medium | 5.3 | 2023-11-14 | Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-38131 | Medium | 6.5 | 2023-11-14 | Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access. |
CVE-2023-36860 | High | 7.1 | 2023-11-14 | Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. |
CVE-2023-29165 | Medium | 6.7 | 2023-11-14 | Unquoted search path or element in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable esca… |
CVE-2023-28741 | High | 7.9 | 2023-11-14 | Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentially enable escalation… |
CVE-2023-28740 | Medium | 6.7 | 2023-11-14 | Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially… |
CVE-2023-28737 | High | 8.8 | 2023-11-14 | Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-28723 | Low | 3.3 | 2023-11-14 | Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentia… |
CVE-2023-28404 | Low | 3.8 | 2023-11-14 | Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to poten… |
CVE-2023-28401 | Medium | 5.7 | 2023-11-14 | Out-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potent… |
CVE-2023-28397 | High | 7.8 | 2023-11-14 | Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalation of privileges via… |
CVE-2023-28378 | Medium | 6.7 | 2023-11-14 | Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable esc… |
CVE-2023-27305 | Medium | 6.7 | 2023-11-14 | Incorrect default permissions in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escala… |
CVE-2023-26589 | Medium | 6.5 | 2023-11-14 | Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of service via local acc… |
CVE-2023-25952 | Medium | 6.1 | 2023-11-14 | Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable denial of servic… |
CVE-2023-25949 | Medium | 5.5 | 2023-11-14 | Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of serv… |
CVE-2023-25071 | Medium | 5.6 | 2023-11-14 | NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to p… |
CVE-2023-22663 | Medium | 5.9 | 2023-11-14 | Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. |
CVE-2023-22448 | Medium | 5.9 | 2023-11-14 | Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access. |
CVE-2023-22337 | High | 7.5 | 2023-11-14 | Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2023-22310 | Medium | 6.5 | 2023-11-14 | Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local acces… |
CVE-2023-22305 | Medium | 6.5 | 2023-11-14 | Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local acc… |
CVE-2023-22292 | High | 7.3 | 2023-11-14 | Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2023-22290 | Medium | 6.5 | 2023-11-14 | Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access. |
CVE-2023-22285 | High | 7.5 | 2023-11-14 | Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2022-46647 | Low | 2.2 | 2023-11-14 | Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable information disclosure vi… |
CVE-2022-46646 | Low | 2.2 | 2023-11-14 | Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated user to potentially enable information dis… |
CVE-2022-46301 | Low | 1.9 | 2023-11-14 | Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-46299 | Low | 3.3 | 2023-11-14 | Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local acce… |
CVE-2022-46298 | Low | 1.9 | 2023-11-14 | Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-45469 | Low | 2.2 | 2023-11-14 | Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2022-45109 | Low | 3.3 | 2023-11-14 | Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2022-43666 | Low | 3.3 | 2023-11-14 | Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enabl… |
CVE-2022-43477 | Low | 3.3 | 2023-11-14 | Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access. |
CVE-2022-36396 | High | 8.2 | 2023-11-14 | Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privileged user to pote… |
CVE-2022-36374 | High | 7.5 | 2023-11-14 | Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potent… |
CVE-2023-38177 | Medium | 6.1 | 2023-11-14 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-38151 | High | 8.8 | 2023-11-14 | Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability |
CVE-2023-36719 | High | 7.8 | 2023-11-14 | Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability |
CVE-2023-36705 | High | 7.8 | 2023-11-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-36560 | High | 8.8 | 2023-11-14 | ASP.NET Security Feature Bypass Vulnerability |
CVE-2023-36439 | High | 8.0 | 2023-11-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36428 | Medium | 5.5 | 2023-11-14 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2023-36427 | High | 7.0 | 2023-11-14 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2023-36425 | High | 8.0 | 2023-11-14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2023-36424 | High | 7.8 | 2023-11-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36423 | High | 8.8 | 2023-11-14 | Microsoft Remote Registry Service Remote Code Execution Vulnerability |
CVE-2023-36422 | High | 7.8 | 2023-11-14 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2023-36413 | Medium | 6.5 | 2023-11-14 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2023-36410 | High | 7.6 | 2023-11-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-36408 | High | 7.8 | 2023-11-14 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2023-36407 | High | 7.8 | 2023-11-14 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2023-36406 | Medium | 5.5 | 2023-11-14 | Windows Hyper-V Information Disclosure Vulnerability |
CVE-2023-36405 | High | 7.0 | 2023-11-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36404 | Medium | 5.5 | 2023-11-14 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36403 | High | 7.0 | 2023-11-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36402 | High | 8.8 | 2023-11-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36401 | High | 7.2 | 2023-11-14 | Microsoft Remote Registry Service Remote Code Execution Vulnerability |
CVE-2023-36400 | High | 8.8 | 2023-11-14 | Windows HMAC Key Derivation Elevation of Privilege Vulnerability |
CVE-2023-36399 | High | 7.1 | 2023-11-14 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2023-36398 | Medium | 6.5 | 2023-11-14 | Windows NTFS Information Disclosure Vulnerability |
CVE-2023-36397 | Critical | 9.8 | 2023-11-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-36396 | High | 7.8 | 2023-11-14 | Windows Compressed Folder Remote Code Execution Vulnerability |
CVE-2023-36395 | High | 7.5 | 2023-11-14 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2023-36394 | High | 7.0 | 2023-11-14 | Windows Search Service Elevation of Privilege Vulnerability |
CVE-2023-36393 | High | 7.8 | 2023-11-14 | Windows User Interface Application Core Remote Code Execution Vulnerability |
CVE-2023-36392 | High | 7.5 | 2023-11-14 | DHCP Server Service Denial of Service Vulnerability |