Microsoft
Page 84 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33135 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-33133 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-33132 | Medium | 6.3 | 2023-06-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-33131 | High | 8.8 | 2023-06-14 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-33130 | High | 7.3 | 2023-06-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-33129 | Medium | 6.5 | 2023-06-14 | Microsoft SharePoint Server Denial of Service Vulnerability |
CVE-2023-33128 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-33126 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-32032 | Medium | 6.5 | 2023-06-14 | .NET and Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-32029 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-32022 | High | 7.6 | 2023-06-14 | Windows Server Service Security Feature Bypass Vulnerability |
CVE-2023-32021 | High | 7.1 | 2023-06-14 | Windows SMB Witness Service Security Feature Bypass Vulnerability |
CVE-2023-32020 | Medium | 5.6 | 2023-06-14 | Windows DNS Spoofing Vulnerability |
CVE-2023-32019 | Medium | 4.7 | 2023-06-14 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-32018 | High | 7.8 | 2023-06-14 | Windows Hello Remote Code Execution Vulnerability |
CVE-2023-32017 | High | 7.8 | 2023-06-14 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
CVE-2023-32016 | Medium | 5.5 | 2023-06-14 | Windows Installer Information Disclosure Vulnerability |
CVE-2023-32015 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-32014 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-32013 | Medium | 5.3 | 2023-06-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2023-32012 | High | 7.8 | 2023-06-14 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2023-32011 | High | 7.5 | 2023-06-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2023-32010 | High | 7.0 | 2023-06-14 | Windows Bus Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-32009 | High | 8.8 | 2023-06-14 | Windows Collaborative Translation Framework Elevation of Privilege Vulnerability |
CVE-2023-32008 | High | 7.8 | 2023-06-14 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
CVE-2023-29373 | High | 8.8 | 2023-06-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-29372 | High | 8.8 | 2023-06-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-29371 | High | 7.8 | 2023-06-14 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-29370 | High | 7.8 | 2023-06-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-29369 | Medium | 6.5 | 2023-06-14 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-29368 | High | 7.0 | 2023-06-14 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2023-29367 | High | 7.8 | 2023-06-14 | iSCSI Target WMI Provider Remote Code Execution Vulnerability |
CVE-2023-29366 | High | 7.8 | 2023-06-14 | Windows Geolocation Service Remote Code Execution Vulnerability |
CVE-2023-29365 | High | 7.8 | 2023-06-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-29364 | High | 7.0 | 2023-06-14 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2023-29363 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-29362 | High | 8.8 | 2023-06-14 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2023-29361 | High | 7.0 | 2023-06-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-29360 | High | 8.4 | 2023-06-14 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2023-29359 | High | 7.8 | 2023-06-14 | GDI Elevation of Privilege Vulnerability |
CVE-2023-29358 | High | 7.8 | 2023-06-14 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-29357 | Critical | 9.8 | 2023-06-14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-29355 | Medium | 5.3 | 2023-06-14 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-29353 | Medium | 5.5 | 2023-06-14 | Sysinternals Process Monitor for Windows Denial of Service Vulnerability |
CVE-2023-29352 | Medium | 6.5 | 2023-06-14 | Windows Remote Desktop Security Feature Bypass Vulnerability |
CVE-2023-29351 | High | 8.1 | 2023-06-14 | Windows Group Policy Elevation of Privilege Vulnerability |
CVE-2023-29346 | High | 7.8 | 2023-06-14 | NTFS Elevation of Privilege Vulnerability |
CVE-2023-24938 | Medium | 6.5 | 2023-06-14 | Windows CryptoAPI Denial of Service Vulnerability |
CVE-2023-21569 | Medium | 5.5 | 2023-06-14 | Azure DevOps Server Spoofing Vulnerability |
CVE-2023-21565 | High | 7.1 | 2023-06-14 | Azure DevOps Server Spoofing Vulnerability |
CVE-2023-34121 | Medium | 4.1 | 2023-06-13 | Improper input validation in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting clients before 5.14.0 may allow an authenticated user to potentially… |
CVE-2023-34120 | High | 8.7 | 2023-06-13 | Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0 may allow an authenticated user to p… |
CVE-2023-28603 | High | 7.7 | 2023-06-13 | Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without prop… |
CVE-2023-28303 | Low | 3.3 | 2023-06-13 | Windows Snipping Tool Information Disclosure Vulnerability |
CVE-2019-16283 | High | 7.8 | 2023-06-09 | A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution. |
CVE-2023-29345 | Medium | 6.1 | 2023-06-07 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2022-31693 | Medium | 5.5 | 2023-06-07 | VMware Tools for Windows (12.x.y prior to 12.1.5, 11.x.y and 10.x.y) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with lo… |
CVE-2023-3079 | High | 8.8 | 2023-06-05 | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-29344 | High | 7.8 | 2023-06-05 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33693 | Medium | 5.5 | 2023-06-05 | A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file. |
CVE-2023-33143 | High | 7.5 | 2023-06-03 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-25738 | Medium | 6.5 | 2023-06-02 | Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn wo… |
CVE-2023-25734 | High | 8.1 | 2023-06-02 | After downloading a Windows <code>.url</code> shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network… |
CVE-2022-35742 | High | 7.5 | 2023-06-01 | Microsoft Outlook Denial of Service Vulnerability |
CVE-2022-35759 | Medium | 6.5 | 2023-05-31 | Windows Local Security Authority (LSA) Denial of Service Vulnerability |
CVE-2022-35758 | Medium | 5.5 | 2023-05-31 | Windows Kernel Memory Information Disclosure Vulnerability |
CVE-2022-35757 | High | 7.3 | 2023-05-31 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2022-35756 | High | 7.8 | 2023-05-31 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2022-35755 | High | 7.3 | 2023-05-31 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2022-35754 | Medium | 6.7 | 2023-05-31 | Unified Write Filter Elevation of Privilege Vulnerability |
CVE-2022-35753 | High | 8.1 | 2023-05-31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-35752 | High | 8.1 | 2023-05-31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-35751 | High | 7.8 | 2023-05-31 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2022-35750 | High | 7.8 | 2023-05-31 | Win32k Elevation of Privilege Vulnerability |
CVE-2022-35749 | High | 7.8 | 2023-05-31 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-35748 | High | 7.5 | 2023-05-31 | HTTP.sys Denial of Service Vulnerability |
CVE-2022-35747 | Medium | 5.9 | 2023-05-31 | Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability |
CVE-2022-35746 | High | 7.8 | 2023-05-31 | Windows Digital Media Receiver Elevation of Privilege Vulnerability |
CVE-2022-35745 | High | 8.1 | 2023-05-31 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2022-35744 | Critical | 9.8 | 2023-05-31 | Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability |
CVE-2022-35743 | High | 7.8 | 2023-05-31 | Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability |
CVE-2023-28353 | High | 8.8 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. An unauthenticated attacker is able to upload any type of file to any location on the Teache… |
CVE-2023-28352 | High | 7.4 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Stu… |
CVE-2023-28351 | Low | 3.3 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is log… |
CVE-2023-28350 | Medium | 6.1 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. Attacker-supplied input is not validated/sanitized before being rendered in both the Teacher… |
CVE-2023-28349 | High | 8.8 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a crafted program that functions similarly to the T… |
CVE-2023-28348 | High | 7.4 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. A suitably positioned attacker could perform a man-in-the-middle attack on either a connecte… |
CVE-2023-28347 | Critical | 9.6 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for an attacker to create a proof-of-concept script that functions similarly… |
CVE-2023-28346 | High | 7.3 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. It is possible for a remote attacker to communicate with the private API endpoints exposed a… |
CVE-2023-28345 | Medium | 4.6 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application exposes the teacher's Console password in cleartext… |
CVE-2023-28344 | High | 7.1 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly… |
CVE-2023-2939 | High | 7.8 | 2023-05-30 | Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker to perform privilege escalation via craft… |
CVE-2023-20884 | Medium | 6.1 | 2023-05-30 | VMware Workspace ONE Access and VMware Identity Manager contain an insecure redirect vulnerability. An unauthenticated malicious actor may be able to redirect… |
CVE-2023-2984 | High | 8.8 | 2023-05-30 | Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22. |
CVE-2023-2874 | Medium | 5.5 | 2023-05-24 | A vulnerability, which was classified as problematic, has been found in Twister Antivirus 8. This issue affects the function 0x804f2158/0x804f2154/0x804f2150/0… |
CVE-2023-2873 | Medium | 5.3 | 2023-05-24 | A vulnerability classified as critical was found in Twister Antivirus 8. This vulnerability affects the function 0x804f2143/0x804f217f/0x804f214b/0x80800043 in… |
CVE-2023-32336 | High | 8.8 | 2023-05-22 | IBM InfoSphere Information Server 11.7 is affected by a remote code execution vulnerability due to insecure deserialization in an RMI service. IBM X-Force ID… |
CVE-2023-28950 | Medium | 5.1 | 2023-05-19 | IBM MQ 8.0, 9.0, 9.1, 9.2, and 9.3 could disclose sensitive user information from a trace file if that functionality has been enabled. IBM X-Force ID: 251358. |
CVE-2023-28529 | Medium | 5.5 | 2023-05-19 | IBM InfoSphere Information Server 11.7 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2023-22878 | Medium | 6.2 | 2023-05-19 | IBM InfoSphere Information Server 11.7 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 244373. |