Microsoft
Page 79 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36763 | High | 7.5 | 2023-09-12 | Microsoft Outlook Information Disclosure Vulnerability |
CVE-2023-36762 | High | 7.3 | 2023-09-12 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-36761 | Medium | 6.5 | 2023-09-12 | Microsoft Word Information Disclosure Vulnerability |
CVE-2023-36760 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36759 | Medium | 6.7 | 2023-09-12 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-36758 | High | 7.8 | 2023-09-12 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-36757 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-36756 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36745 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36744 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36742 | High | 7.8 | 2023-09-12 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2023-36740 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36739 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36736 | Medium | 4.4 | 2023-09-12 | Microsoft Identity Linux Broker Remote Code Execution Vulnerability |
CVE-2023-35355 | High | 7.8 | 2023-09-12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-33136 | High | 8.8 | 2023-09-12 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2023-29332 | High | 7.5 | 2023-09-12 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability |
CVE-2023-4863 | High | 8.8 | 2023-09-12 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v… |
CVE-2023-4759 | High | 8.8 | 2023-09-12 | Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git re… |
CVE-2023-27470 | High | 7.0 | 2023-09-11 | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSuppor… |
CVE-2020-24088 | High | 7.8 | 2023-09-11 | An issue was discovered in MmMapIoSpace routine in Foxconn Live Update Utility 2.1.6.26, allows local attackers to escalate privileges. |
CVE-2022-34238 | Medium | 5.5 | 2023-09-11 | Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 20.005.30334 (and earlier) are affected by an out-of-bounds read vulnerabili… |
CVE-2022-34227 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-34224 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 22.001.20142 (and earlier), 20.005.30334 (and earlier) and 17.012.30229 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2022-28836 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-28835 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an Use-After-Free vulnerability that could result in arbitrary code executio… |
CVE-2022-28834 | High | 7.8 | 2023-09-11 | Adobe InCopy versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exe… |
CVE-2022-28833 | High | 7.8 | 2023-09-11 | Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2022-28832 | High | 7.8 | 2023-09-11 | Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a crafted file, which coul… |
CVE-2022-28831 | High | 7.8 | 2023-09-11 | Adobe InDesign versions 17.1 (and earlier) and 16.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2019-7819 | Medium | 5.5 | 2023-09-11 | Adobe Acrobat Reader versions 2019.010.20098 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2019-16471 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the co… |
CVE-2019-16470 | High | 7.8 | 2023-09-11 | Adobe Acrobat Reader versions 2019.021.20056 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execut… |
CVE-2023-4576 | High | 8.6 | 2023-09-11 | On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that… |
CVE-2022-30646 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30645 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30644 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by a Use-After-Free vulnerability that could result in arbitrary code exe… |
CVE-2022-30643 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30642 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30641 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30640 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30639 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30638 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2022-30637 | High | 7.8 | 2023-09-07 | Adobe Illustrator versions 26.0.2 (and earlier) and 25.4.5 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary co… |
CVE-2021-44195 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44194 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44193 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44192 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44191 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44190 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of s… |
CVE-2021-44189 | Low | 3.3 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensi… |
CVE-2021-44188 | High | 7.8 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past… |
CVE-2021-43753 | High | 7.8 | 2023-09-07 | Adobe Lightroom versions 4.4 (and earlier) are affected by a use-after-free vulnerability in the processing of parsing TIF files that could result in privilege… |
CVE-2021-43751 | Low | 3.3 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-43027 | High | 7.8 | 2023-09-07 | Adobe After Effects versions 22.0 (and earlier) and 18.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past… |
CVE-2021-43018 | High | 7.8 | 2023-09-07 | Adobe Photoshop versions 23.0.2 and 22.5.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in… |
CVE-2021-42734 | Medium | 5.5 | 2023-09-07 | Adobe Photoshop version 22.5.1 and earlier versions are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2021-42265 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-40795 | High | 7.8 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability which could result in a read past t… |
CVE-2021-40791 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2021-40790 | Medium | 5.5 | 2023-09-07 | Adobe Premiere Pro versions 22.0 (and earlier) and 15.4.2 (and earlier) are affected by an Use-After-Free vulnerability that could lead to disclosure of sensit… |
CVE-2021-40723 | Medium | 5.5 | 2023-09-07 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an out-of-bound… |
CVE-2023-0925 | Critical | 9.8 | 2023-09-06 | Version 10.11 of webMethods OneData runs an embedded instance of Azul Zulu Java 11.0.15 which hosts a Java RMI registry (listening on TCP port 2099 by default)… |
CVE-2021-39859 | Medium | 5.5 | 2023-09-06 | Acrobat Reader DC versions 2021.005.20060 (and earlier), 2020.004.30006 (and earlier) and 2017.011.30199 (and earlier) are affected by a Use After Free vulnera… |
CVE-2021-36060 | Medium | 5.5 | 2023-09-06 | Adobe Media Encoder version 15.2 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacke… |
CVE-2021-35980 | High | 7.8 | 2023-09-06 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Path traversal vulnera… |
CVE-2021-28644 | High | 7.8 | 2023-09-06 | Acrobat Reader DC versions 2021.005.20054 (and earlier), 2020.004.30005 (and earlier) and 2017.011.30197 (and earlier) are affected by a Path traversal vulnera… |
CVE-2021-21088 | High | 7.8 | 2023-09-06 | Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Fre… |
CVE-2023-32163 | High | 7.8 | 2023-09-06 | Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2023-32162 | High | 7.8 | 2023-09-06 | Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privi… |
CVE-2023-4762 | High | 8.8 | 2023-09-05 | Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security s… |
CVE-2023-31132 | High | 7.8 | 2023-09-05 | Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privilege escalation vulnerability. A low-pri… |
CVE-2023-4688 | Medium | 5.5 | 2023-08-31 | Sensitive information leak through log files. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35433. |
CVE-2023-41751 | Medium | 5.5 | 2023-08-31 | Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent (Windows) before build 32047. |
CVE-2023-41750 | Medium | 5.5 | 2023-08-31 | Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 32047. |
CVE-2023-41749 | High | 7.5 | 2023-08-31 | Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 3… |
CVE-2022-46869 | High | 7.8 | 2023-08-31 | Local privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Wind… |
CVE-2023-41748 | Critical | 9.8 | 2023-08-31 | Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203. |
CVE-2023-41747 | Medium | 6.5 | 2023-08-31 | Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.2… |
CVE-2023-41746 | Critical | 9.8 | 2023-08-31 | Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203. |
CVE-2023-41745 | Medium | 5.5 | 2023-08-31 | Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows)… |
CVE-2023-41743 | High | 7.8 | 2023-08-31 | Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windo… |
CVE-2023-34391 | High | 7.4 | 2023-08-31 | Insecure Inherited Permissions vulnerability in Schweitzer Engineering Laboratories SEL-5033 AcSELerator RTAC Software on Windows allows Leveraging/Manipulatin… |
CVE-2023-31173 | High | 7.7 | 2023-08-31 | Use of Hard-coded Credentials vulnerability in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator on Windows allows Authentication Bypass. S… |
CVE-2023-31167 | Medium | 5.0 | 2023-08-31 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Sc… |
CVE-2023-41742 | High | 7.5 | 2023-08-31 | Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build… |
CVE-2022-46868 | High | 7.8 | 2023-08-31 | Local privilege escalation during recovery due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows)… |
CVE-2023-20900 | High | 7.1 | 2023-08-31 | A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A… |
CVE-2023-40596 | High | 7.0 | 2023-08-30 | In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path… |
CVE-2023-1995 | Medium | 5.3 | 2023-08-29 | Insufficient Logging vulnerability in Hitachi HiRDB Server, HiRDB Server With Addtional Function, HiRDB Structured Data Access Facility.This issue affects HiRD… |
CVE-2023-36741 | High | 8.3 | 2023-08-26 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-40185 | Medium | 6.5 | 2023-08-23 | shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result… |
CVE-2023-1409 | Medium | 5.3 | 2023-08-23 | If the MongoDB Server running on Windows or macOS is configured to use TLS with a specific set of configuration options that are already known to work securely… |
CVE-2023-40370 | Low | 3.7 | 2023-08-22 | IBM Robotic Process Automation 21.0.0 through 21.0.7.1 runtime is vulnerable to information disclosure of script content if the remote REST request computer p… |
CVE-2023-39026 | High | 7.5 | 2023-08-22 | Directory Traversal vulnerability in FileMage Gateway Windows Deployments v.1.10.8 and before allows a remote attacker to obtain sensitive information via a cr… |
CVE-2023-38734 | Medium | 6.6 | 2023-08-22 | IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 is vulnerable to incorrect privilege assignment when importing users from an… |
CVE-2023-38733 | Medium | 4.3 | 2023-08-22 | IBM Robotic Process Automation 21.0.0 through 21.0.7.1 and 23.0.0 through 23.0.1 server could allow an authenticated user to view sensitive information from i… |
CVE-2023-33850 | High | 7.5 | 2023-08-22 | IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By… |
CVE-2023-38732 | Medium | 4.3 | 2023-08-22 | IBM Robotic Process Automation 21.0.0 through 21.0.7 server could allow an authenticated user to view sensitive information from application logs. IBM X-Force… |
CVE-2020-19725 | High | 7.8 | 2023-08-22 | There is a use-after-free vulnerability in file pdd_simplifier.cpp in Z3 before 4.8.8. It occurs when the solver attempt to simplify the constraints and causes… |