Microsoft
Page 83 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32052 | Medium | 5.4 | 2023-07-11 | Microsoft Power Apps (online) Spoofing Vulnerability |
CVE-2023-32051 | High | 7.8 | 2023-07-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-32050 | High | 7.0 | 2023-07-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-32049 | High | 8.8 | 2023-07-11 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2023-32047 | High | 7.8 | 2023-07-11 | Paint 3D Remote Code Execution Vulnerability |
CVE-2023-32046 | High | 7.8 | 2023-07-11 | Windows MSHTML Platform Elevation of Privilege Vulnerability |
CVE-2023-32045 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32044 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32043 | Medium | 6.8 | 2023-07-11 | Windows Remote Desktop Security Feature Bypass Vulnerability |
CVE-2023-32042 | Medium | 6.5 | 2023-07-11 | OLE Automation Information Disclosure Vulnerability |
CVE-2023-32041 | Medium | 5.5 | 2023-07-11 | Windows Update Orchestrator Service Information Disclosure Vulnerability |
CVE-2023-32040 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-32039 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-32038 | High | 8.8 | 2023-07-11 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-32037 | Medium | 6.5 | 2023-07-11 | Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability |
CVE-2023-32035 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32034 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32033 | Medium | 6.6 | 2023-07-11 | Microsoft Failover Cluster Remote Code Execution Vulnerability |
CVE-2023-29347 | High | 8.7 | 2023-07-11 | Windows Admin Center Spoofing Vulnerability |
CVE-2023-21756 | High | 7.8 | 2023-07-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-21526 | High | 7.4 | 2023-07-11 | Windows Netlogon Information Disclosure Vulnerability |
CVE-2023-24881 | Medium | 6.5 | 2023-07-11 | Microsoft Teams Information Disclosure Vulnerability |
CVE-2023-30449 | High | 7.5 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM… |
CVE-2023-30448 | Medium | 5.9 | 2023-07-10 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on cer… |
CVE-2023-30447 | Medium | 5.9 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on cer… |
CVE-2023-30446 | Medium | 5.9 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on cer… |
CVE-2023-30445 | High | 7.5 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on cer… |
CVE-2023-30442 | Medium | 5.9 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash w… |
CVE-2023-30431 | High | 8.4 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds che… |
CVE-2023-29256 | Medium | 5.3 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege man… |
CVE-2023-27869 | Medium | 6.3 | 2023-07-10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the syste… |
CVE-2023-27868 | Medium | 6.3 | 2023-07-10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the syste… |
CVE-2023-27867 | Medium | 6.3 | 2023-07-10 | IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Inj… |
CVE-2023-27558 | High | 8.4 | 2023-07-10 | IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path… |
CVE-2023-23487 | Medium | 4.3 | 2023-07-10 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918. |
CVE-2021-42083 | High | 8.7 | 2023-07-10 | An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager * open the ITSM tab * add a we… |
CVE-2023-25523 | Low | 3.3 | 2023-07-04 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by pr… |
CVE-2021-42307 | Medium | 4.3 | 2023-07-01 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2021-34506 | Medium | 6.1 | 2023-07-01 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2021-34475 | Medium | 5.4 | 2023-07-01 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2021-31982 | High | 8.8 | 2023-07-01 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2022-23264 | Medium | 4.7 | 2023-06-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-26899 | Medium | 6.3 | 2023-06-29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-29147 | Low | 3.1 | 2023-06-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2022-29146 | High | 8.3 | 2023-06-29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2022-29144 | High | 7.5 | 2023-06-29 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2021-31937 | High | 8.2 | 2023-06-28 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-34148 | High | 7.8 | 2023-06-26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privi… |
CVE-2023-34147 | High | 7.8 | 2023-06-26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privi… |
CVE-2023-34146 | High | 7.8 | 2023-06-26 | An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privi… |
CVE-2023-34145 | High | 7.8 | 2023-06-26 | An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their priv… |
CVE-2023-34144 | High | 7.8 | 2023-06-26 | An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their priv… |
CVE-2023-32557 | Critical | 9.8 | 2023-06-26 | A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated attacker to upload an arbitrary file to the… |
CVE-2023-32556 | Medium | 5.5 | 2023-06-26 | A link following vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to disclose sensitive information. P… |
CVE-2023-32555 | High | 7.0 | 2023-06-26 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on af… |
CVE-2023-32554 | High | 7.0 | 2023-06-26 | A Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to escalate privileges on af… |
CVE-2023-32553 | Medium | 5.3 | 2023-06-26 | An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to d… |
CVE-2023-32552 | Medium | 5.3 | 2023-06-26 | An Improper access control vulnerability in Trend Micro Apex One and Apex One as a Service could allow an unauthenticated user under certain circumstances to d… |
CVE-2023-30902 | Medium | 5.5 | 2023-06-26 | A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privile… |
CVE-2023-28929 | High | 7.8 | 2023-06-26 | Trend Micro Security 2021, 2022, and 2023 (Consumer) are vulnerable to a DLL Hijacking vulnerability which could allow an attacker to use a specific executable… |
CVE-2023-25515 | High | 7.8 | 2023-06-23 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial… |
CVE-2023-28065 | Medium | 6.7 | 2023-06-23 | Dell Command | Update, Dell Update, and Alienware Update versions 4.8.0 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnerabilit… |
CVE-2023-28071 | Medium | 6.3 | 2023-06-23 | Dell Command | Update, Dell Update, and Alienware Update versions 4.9.0, A01 and prior contain an Insecure Operation on Windows Junction / Mount Point vulnera… |
CVE-2023-33141 | High | 7.5 | 2023-06-23 | Yet Another Reverse Proxy (YARP) Denial of Service Vulnerability |
CVE-2023-35174 | High | 8.6 | 2023-06-22 | Livebook is a web application for writing interactive and collaborative code notebooks. On Windows, it is possible to open a `livebook://` link from a browser… |
CVE-2023-33842 | Medium | 6.2 | 2023-06-22 | IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user… |
CVE-2023-28956 | High | 8.4 | 2023-06-22 | IBM Spectrum Protect Backup-Archive Client 8.1.0.0 through 8.1.17.2 may allow a local user to escalate their privileges due to improper access controls. |
CVE-2023-29542 | Critical | 9.8 | 2023-06-19 | A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .downlo… |
CVE-2023-32214 | High | 7.5 | 2023-06-19 | Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating… |
CVE-2023-29532 | Medium | 5.5 | 2023-06-19 | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB s… |
CVE-2023-28295 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2023-28287 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2023-32028 | High | 7.8 | 2023-06-16 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-32027 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-32026 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-32025 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-29356 | High | 7.8 | 2023-06-16 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-29349 | High | 7.8 | 2023-06-16 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability |
CVE-2022-4149 | High | 7.0 | 2023-06-15 | The Netskope client service (prior to R96) on Windows runs as NT AUTHORITY\SYSTEM which writes log files to a writable directory (C:\Users\Public\netSkope) for… |
CVE-2023-2270 | High | 7.0 | 2023-06-15 | The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The co… |
CVE-2023-34367 | Medium | 6.5 | 2023-06-14 | Windows 7 is vulnerable to a full blind TCP/IP hijacking attack. The vulnerability exists in Windows 7 (any Windows until Windows 8) and in any implementation… |
CVE-2023-32031 | High | 8.8 | 2023-06-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-32030 | High | 7.5 | 2023-06-14 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2023-32024 | Low | 3.0 | 2023-06-14 | Microsoft Power Apps Spoofing Vulnerability |
CVE-2023-29337 | High | 7.1 | 2023-06-14 | NuGet Client Remote Code Execution Vulnerability |
CVE-2023-29331 | High | 7.5 | 2023-06-14 | .NET, .NET Framework, and Visual Studio Denial of Service Vulnerability |
CVE-2023-29326 | High | 7.8 | 2023-06-14 | .NET Framework Remote Code Execution Vulnerability |
CVE-2023-28310 | High | 8.0 | 2023-06-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-24936 | High | 7.5 | 2023-06-14 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-24897 | High | 7.8 | 2023-06-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-24895 | High | 7.8 | 2023-06-14 | .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-0837 | Medium | 6.6 | 2023-06-14 | An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged u… |
CVE-2023-24937 | Medium | 6.5 | 2023-06-14 | Windows CryptoAPI Denial of Service Vulnerability |
CVE-2023-33146 | High | 7.8 | 2023-06-14 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33145 | Medium | 6.5 | 2023-06-14 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2023-33144 | Medium | 6.6 | 2023-06-14 | Visual Studio Code Spoofing Vulnerability |
CVE-2023-33142 | Medium | 6.5 | 2023-06-14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-33140 | Medium | 6.5 | 2023-06-14 | Microsoft OneNote Spoofing Vulnerability |
CVE-2023-33139 | Medium | 5.5 | 2023-06-14 | Visual Studio Information Disclosure Vulnerability |
CVE-2023-33137 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |