Microsoft
Page 81 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36869 | Medium | 6.3 | 2023-08-08 | Azure DevOps Server Spoofing Vulnerability |
CVE-2023-36866 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-36865 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-35394 | Medium | 4.6 | 2023-08-08 | Azure HDInsight Jupyter Notebook Spoofing Vulnerability |
CVE-2023-35393 | Medium | 4.5 | 2023-08-08 | Azure Apache Hive Spoofing Vulnerability |
CVE-2023-35390 | High | 7.8 | 2023-08-08 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-35389 | Medium | 6.5 | 2023-08-08 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2023-35388 | High | 8.0 | 2023-08-08 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-35387 | High | 8.8 | 2023-08-08 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
CVE-2023-35386 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35385 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-35384 | Medium | 5.4 | 2023-08-08 | Windows HTML Platforms Security Feature Bypass Vulnerability |
CVE-2023-35383 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2023-35382 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35381 | High | 8.8 | 2023-08-08 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-35380 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35379 | High | 7.8 | 2023-08-08 | Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability |
CVE-2023-35378 | High | 7.0 | 2023-08-08 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2023-35377 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-35376 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-35372 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-35371 | High | 7.8 | 2023-08-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-35368 | High | 8.8 | 2023-08-08 | Microsoft Exchange Remote Code Execution Vulnerability |
CVE-2023-35359 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-29330 | High | 8.8 | 2023-08-08 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2023-29328 | High | 8.8 | 2023-08-08 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2023-21709 | Critical | 9.8 | 2023-08-08 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-20588 | Medium | 5.5 | 2023-08-08 | A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. |
CVE-2023-20569 | Medium | 4.7 | 2023-08-08 | A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execut… |
CVE-2023-20562 | High | 7.8 | 2023-08-08 | Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially… |
CVE-2023-20561 | Medium | 5.5 | 2023-08-08 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address poten… |
CVE-2023-20556 | Medium | 5.5 | 2023-08-08 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentia… |
CVE-2023-38157 | Medium | 6.5 | 2023-08-07 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-32783 | High | 7.5 | 2023-08-07 | The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a… |
CVE-2023-39143 | Critical | 9.8 | 2023-08-04 | PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. This leads to remote… |
CVE-2023-32764 | High | 7.8 | 2023-08-03 | Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator. |
CVE-2023-4136 | High | 7.4 | 2023-08-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CrafterCMS Engine on Windows, MacOS, Linux, x86, ARM, 64… |
CVE-2023-36858 | High | 7.1 | 2023-08-02 | An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured serv… |
CVE-2023-4054 | Medium | 5.5 | 2023-08-01 | When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code. *This bug only affects Firefox on Windows. Other oper… |
CVE-2023-2313 | High | 8.8 | 2023-07-29 | Inappropriate implementation in Sandbox in Google Chrome on Windows prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process t… |
CVE-2023-26077 | High | 7.8 | 2023-07-24 | Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions. |
CVE-2023-26078 | High | 7.8 | 2023-07-24 | Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs. |
CVE-2023-35077 | High | 7.5 | 2023-07-21 | An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 o… |
CVE-2023-25841 | Medium | 6.1 | 2023-07-21 | There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unau… |
CVE-2023-25840 | Low | 3.4 | 2023-07-21 | There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted l… |
CVE-2023-38187 | Medium | 6.5 | 2023-07-21 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-38173 | Medium | 4.3 | 2023-07-21 | Microsoft Edge for Android Spoofing Vulnerability |
CVE-2023-35392 | Medium | 4.7 | 2023-07-21 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2021-39822 | High | 7.8 | 2023-07-20 | Adobe InDesign versions 16.3 (and earlier), and 16.3.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code e… |
CVE-2023-25839 | High | 7.0 | 2023-07-19 | There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker to execut… |
CVE-2023-29260 | Medium | 6.5 | 2023-07-19 | IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized re… |
CVE-2023-29259 | Low | 3.7 | 2023-07-19 | IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute. IBM X-Force ID… |
CVE-2023-28513 | Medium | 5.9 | 2023-07-19 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vuln… |
CVE-2023-3765 | Critical | 10.0 | 2023-07-19 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. |
CVE-2023-35900 | Medium | 4.3 | 2023-07-19 | IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may… |
CVE-2023-35898 | Medium | 4.3 | 2023-07-19 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSpher… |
CVE-2023-37143 | Medium | 5.5 | 2023-07-18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp(). |
CVE-2023-37142 | Medium | 5.5 | 2023-07-18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees(). |
CVE-2023-37141 | Medium | 5.5 | 2023-07-18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray(). |
CVE-2023-37140 | Medium | 5.5 | 2023-07-18 | ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount(). |
CVE-2023-37139 | Medium | 5.5 | 2023-07-18 | ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray(). |
CVE-2023-34143 | Medium | 5.6 | 2023-07-18 | Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, H… |
CVE-2023-34142 | Critical | 9.0 | 2023-07-18 | Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Da… |
CVE-2022-4146 | High | 7.3 | 2023-07-18 | Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replicat… |
CVE-2023-26512 | Critical | 9.8 | 2023-07-17 | CWE-502 Deserialization of Untrusted Data at the rabbitmq-connector plugin module in Apache EventMesh (incubating) V1.7.0\V1.8.0 on windows\linux\mac os e.g. p… |
CVE-2023-35012 | Medium | 6.7 | 2023-07-17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 with a Federated configuration is vulnerable to a stack-based buffer overflow, caused by… |
CVE-2023-35901 | Low | 2.7 | 2023-07-17 | IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid chang… |
CVE-2023-33857 | Medium | 5.3 | 2023-07-17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further att… |
CVE-2023-36888 | Medium | 6.3 | 2023-07-14 | Microsoft Edge for Android (Chromium-based) Tampering Vulnerability |
CVE-2023-36887 | High | 7.8 | 2023-07-14 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-36883 | Medium | 4.3 | 2023-07-14 | Microsoft Edge for iOS Spoofing Vulnerability |
CVE-2023-24896 | Medium | 5.4 | 2023-07-14 | Dynamics 365 Finance Spoofing Vulnerability |
CVE-2023-3434 | Medium | 4.4 | 2023-07-14 | Improper Input Validation in the hyperlink interpretation in Savoir-faire Linux's Jami (version 20222284) on Windows. This allows an attacker to send a custo… |
CVE-2023-29319 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29318 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29317 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29316 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29315 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29314 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29313 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29312 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29311 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29310 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29309 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29308 | High | 7.8 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2021-44696 | Low | 3.3 | 2023-07-12 | Adobe Prelude version 22.1.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2021-43760 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43759 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43758 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43757 | High | 7.8 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2023-24491 | High | 7.8 | 2023-07-11 | A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint… |
CVE-2023-36884 | High | 7.5 | 2023-07-11 | Windows Search Remote Code Execution Vulnerability |
CVE-2023-36874 | High | 7.8 | 2023-07-11 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-36872 | Medium | 5.5 | 2023-07-11 | VP9 Video Extensions Information Disclosure Vulnerability |
CVE-2023-36871 | Medium | 6.5 | 2023-07-11 | Azure Active Directory Security Feature Bypass Vulnerability |
CVE-2023-36868 | Medium | 6.5 | 2023-07-11 | Azure Service Fabric on Windows Information Disclosure Vulnerability |
CVE-2023-36867 | High | 7.8 | 2023-07-11 | Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability |
CVE-2023-35374 | High | 7.8 | 2023-07-11 | Paint 3D Remote Code Execution Vulnerability |
CVE-2023-35373 | Medium | 5.3 | 2023-07-11 | Mono Authenticode Validation Spoofing Vulnerability |
CVE-2023-35367 | Critical | 9.8 | 2023-07-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |