Microsoft
Page 80 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38158 | Low | 3.1 | 2023-08-21 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2023-36787 | High | 8.8 | 2023-08-21 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-4417 | Medium | 6.5 | 2023-08-21 | Improper access controls in the entry duplication component in Devolutions Remote Desktop Manager 2023.2.19 and earlier versions on Windows allows an authentic… |
CVE-2023-2971 | Medium | 6.3 | 2023-08-19 | Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers… |
CVE-2023-2318 | High | 8.6 | 2023-08-19 | DOM-based XSS in src/muya/lib/contentState/pasteCtrl.js in MarkText 0.17.1 and before on Windows, Linux and macOS allows arbitrary JavaScript code to run in th… |
CVE-2023-2317 | High | 8.6 | 2023-08-19 | DOM-based XSS in updater/update.html in Typora before 1.6.7 on Windows and Linux allows a crafted markdown file to run arbitrary JavaScript code in the context… |
CVE-2023-2316 | High | 7.4 | 2023-08-19 | Improper path handling in Typora before 1.6.7 on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via… |
CVE-2023-2110 | High | 8.2 | 2023-08-19 | Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remot… |
CVE-2023-2737 | Medium | 5.7 | 2023-08-16 | Improper log permissions in SafeNet Authentication Service Version 3.4.0 on Windows allows an authenticated attacker to cause a denial of service via local pri… |
CVE-2023-20564 | Medium | 6.7 | 2023-08-15 | Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/w… |
CVE-2023-20560 | Medium | 4.4 | 2023-08-15 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value… |
CVE-2023-4333 | Medium | 5.5 | 2023-08-15 | Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server |
CVE-2023-38402 | High | 7.1 | 2023-08-15 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTE… |
CVE-2023-38401 | High | 7.8 | 2023-08-15 | A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow local users to elevate privileges. Successful exploitation could a… |
CVE-2023-38741 | High | 7.5 | 2023-08-14 | IBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read opera… |
CVE-2023-23208 | Medium | 6.1 | 2023-08-13 | Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin, aka GAX-… |
CVE-2023-3937 | Medium | 4.8 | 2023-08-11 | Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authentica… |
CVE-2023-3864 | High | 7.2 | 2023-08-11 | Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with… |
CVE-2023-28714 | High | 8.2 | 2023-08-11 | Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user… |
CVE-2023-28385 | High | 8.2 | 2023-08-11 | Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation o… |
CVE-2023-38248 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38247 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38246 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that c… |
CVE-2023-38245 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Information Disclosure vulnerability. An unauthentic… |
CVE-2023-38244 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38243 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use-After-Free vulnerability that could lead to discl… |
CVE-2023-38242 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38241 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38240 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38239 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38238 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use-After-Free vulnerability that could lead to discl… |
CVE-2023-38237 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38236 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38235 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38234 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that c… |
CVE-2023-38233 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-38232 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-38231 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-38230 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use-After-Free vulnerability that could lead to discl… |
CVE-2023-38229 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an out-of-bounds read vulnerability that could result i… |
CVE-2023-38228 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38227 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38226 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that c… |
CVE-2023-38225 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38224 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-38223 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Access of Uninitialized Pointer that could result in… |
CVE-2023-38222 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-29320 | High | 7.8 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Violation of Secure Design Principles vulnerability… |
CVE-2023-29303 | Medium | 5.5 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by a Use After Free vulnerability that could lead to discl… |
CVE-2023-29299 | Medium | 4.7 | 2023-08-10 | Adobe Acrobat Reader versions 23.003.20244 (and earlier) and 20.005.30467 (and earlier) are affected by an Untrusted Search Path vulnerability that could lead… |
CVE-2023-35838 | Medium | 5.7 | 2023-08-09 | The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP add… |
CVE-2023-38213 | Medium | 5.5 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage… |
CVE-2023-38212 | High | 7.8 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… |
CVE-2023-38211 | High | 7.8 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. E… |
CVE-2023-38180 | High | 7.5 | 2023-08-08 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2023-36899 | High | 8.8 | 2023-08-08 | ASP.NET Elevation of Privilege Vulnerability |
CVE-2023-36873 | High | 7.4 | 2023-08-08 | .NET Framework Spoofing Vulnerability |
CVE-2023-35391 | Medium | 6.2 | 2023-08-08 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability |
CVE-2023-38254 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-38188 | Medium | 4.5 | 2023-08-08 | Azure Apache Hadoop Spoofing Vulnerability |
CVE-2023-38186 | High | 8.8 | 2023-08-08 | Windows Mobile Device Management Elevation of Privilege Vulnerability |
CVE-2023-38185 | High | 8.8 | 2023-08-08 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-38184 | High | 7.5 | 2023-08-08 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-38182 | High | 8.0 | 2023-08-08 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-38181 | High | 8.8 | 2023-08-08 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-38178 | High | 7.5 | 2023-08-08 | .NET Core and Visual Studio Denial of Service Vulnerability |
CVE-2023-38176 | High | 7.0 | 2023-08-08 | Azure Arc-Enabled Servers Elevation of Privilege Vulnerability |
CVE-2023-38175 | High | 7.8 | 2023-08-08 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2023-38172 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-38170 | High | 7.8 | 2023-08-08 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2023-38169 | High | 8.8 | 2023-08-08 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-38167 | High | 7.2 | 2023-08-08 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
CVE-2023-38154 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36914 | Medium | 5.5 | 2023-08-08 | Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability |
CVE-2023-36913 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2023-36912 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36911 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36910 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36909 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36908 | Medium | 6.5 | 2023-08-08 | Windows Hyper-V Information Disclosure Vulnerability |
CVE-2023-36907 | Medium | 5.5 | 2023-08-08 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2023-36906 | Medium | 5.5 | 2023-08-08 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2023-36905 | Medium | 5.5 | 2023-08-08 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2023-36904 | High | 7.8 | 2023-08-08 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-36903 | High | 7.8 | 2023-08-08 | Windows System Assessment Tool Elevation of Privilege Vulnerability |
CVE-2023-36900 | High | 7.8 | 2023-08-08 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36898 | High | 7.8 | 2023-08-08 | Tablet Windows User Interface Application Core Remote Code Execution Vulnerability |
CVE-2023-36897 | High | 8.1 | 2023-08-08 | Visual Studio Tools for Office Runtime Spoofing Vulnerability |
CVE-2023-36896 | High | 7.8 | 2023-08-08 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-36895 | High | 7.8 | 2023-08-08 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-36894 | Medium | 6.5 | 2023-08-08 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2023-36893 | Medium | 6.5 | 2023-08-08 | Microsoft Outlook Spoofing Vulnerability |
CVE-2023-36892 | High | 8.0 | 2023-08-08 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-36891 | High | 8.0 | 2023-08-08 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-36890 | Medium | 6.5 | 2023-08-08 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2023-36889 | Medium | 5.5 | 2023-08-08 | Windows Group Policy Security Feature Bypass Vulnerability |
CVE-2023-36882 | High | 8.8 | 2023-08-08 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36881 | Medium | 4.5 | 2023-08-08 | Azure Apache Ambari Spoofing Vulnerability |
CVE-2023-36877 | Medium | 4.5 | 2023-08-08 | Azure Apache Oozie Spoofing Vulnerability |
CVE-2023-36876 | High | 7.1 | 2023-08-08 | Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability |