Microsoft
Page 85 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-47984 | Medium | 6.3 | 2023-05-19 | IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the att… |
CVE-2023-28514 | Medium | 6.2 | 2023-05-19 | IBM MQ 8.0, 9.0, and 9.1 could allow a local user to obtain sensitive credential information when a detailed technical error message is returned in a stack tra… |
CVE-2023-33240 | High | 7.8 | 2023-05-19 | Foxit PDF Reader (12.1.1.15289 and earlier) and Foxit PDF Editor (12.1.1.15289 and all previous 12.x versions, 11.2.5.53785 and all previous 11.x versions, and… |
CVE-2022-35798 | Low | 3.3 | 2023-05-18 | Azure Arc Jumpstart Information Disclosure Vulnerability |
CVE-2022-4418 | High | 7.8 | 2023-05-18 | Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Cyber Protect Home Office (Windows)… |
CVE-2022-45459 | High | 7.5 | 2023-05-18 | Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis… |
CVE-2022-45458 | High | 7.5 | 2023-05-18 | Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS… |
CVE-2022-45457 | High | 7.5 | 2023-05-18 | Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before… |
CVE-2022-45453 | High | 7.5 | 2023-05-18 | TLS/SSL weak cipher suites enabled. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 30984. |
CVE-2022-45452 | High | 7.8 | 2023-05-18 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber P… |
CVE-2022-45450 | High | 7.5 | 2023-05-18 | Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) bef… |
CVE-2023-2679 | Medium | 4.1 | 2023-05-17 | Data leakage in Adobe connector in Snow Software SPE 9.27.0 on Windows allows privileged user to observe other users data. |
CVE-2023-27382 | Medium | 6.7 | 2023-05-10 | Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.156 may allow an auth… |
CVE-2022-41687 | Medium | 6.7 | 2023-05-10 | Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an auth… |
CVE-2022-41628 | Medium | 6.7 | 2023-05-10 | Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an au… |
CVE-2023-29343 | High | 7.8 | 2023-05-09 | SysInternals Sysmon for Windows Elevation of Privilege Vulnerability |
CVE-2023-29341 | High | 7.8 | 2023-05-09 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2023-29340 | High | 7.8 | 2023-05-09 | AV1 Video Extension Remote Code Execution Vulnerability |
CVE-2023-29338 | Medium | 6.6 | 2023-05-09 | Visual Studio Code Spoofing Vulnerability |
CVE-2023-29336 | High | 7.8 | 2023-05-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-29335 | High | 7.5 | 2023-05-09 | Microsoft Word Security Feature Bypass Vulnerability |
CVE-2023-29333 | Low | 3.3 | 2023-05-09 | Microsoft Access Denial of Service Vulnerability |
CVE-2023-29325 | High | 8.1 | 2023-05-09 | Windows OLE Remote Code Execution Vulnerability |
CVE-2023-29324 | Medium | 6.5 | 2023-05-09 | Windows MSHTML Platform Security Feature Bypass Vulnerability |
CVE-2023-28290 | Medium | 5.3 | 2023-05-09 | Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability |
CVE-2023-28283 | High | 8.1 | 2023-05-09 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-28251 | Medium | 5.5 | 2023-05-09 | Windows Driver Revocation List Security Feature Bypass Vulnerability |
CVE-2023-24955 | High | 7.2 | 2023-05-09 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-24954 | Medium | 6.5 | 2023-05-09 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2023-24953 | High | 7.8 | 2023-05-09 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-24950 | Medium | 6.5 | 2023-05-09 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-24949 | High | 7.8 | 2023-05-09 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-24948 | High | 7.4 | 2023-05-09 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2023-24947 | High | 8.8 | 2023-05-09 | Windows Bluetooth Driver Remote Code Execution Vulnerability |
CVE-2023-24946 | High | 7.8 | 2023-05-09 | Windows Backup Service Elevation of Privilege Vulnerability |
CVE-2023-24945 | Medium | 5.5 | 2023-05-09 | Windows iSCSI Target Service Information Disclosure Vulnerability |
CVE-2023-24944 | Medium | 6.5 | 2023-05-09 | Windows Bluetooth Driver Information Disclosure Vulnerability |
CVE-2023-24943 | Critical | 9.8 | 2023-05-09 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-24942 | High | 7.5 | 2023-05-09 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-24941 | Critical | 9.8 | 2023-05-09 | Windows Network File System Remote Code Execution Vulnerability |
CVE-2023-24940 | High | 7.5 | 2023-05-09 | Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability |
CVE-2023-24939 | High | 7.5 | 2023-05-09 | Server for NFS Denial of Service Vulnerability |
CVE-2023-24932 | Medium | 6.7 | 2023-05-09 | Secure Boot Security Feature Bypass Vulnerability |
CVE-2023-24905 | High | 7.8 | 2023-05-09 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2023-24904 | High | 7.1 | 2023-05-09 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-24903 | High | 8.1 | 2023-05-09 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-24902 | High | 7.8 | 2023-05-09 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-24901 | High | 7.5 | 2023-05-09 | Windows NFS Portmapper Information Disclosure Vulnerability |
CVE-2023-24900 | Medium | 5.9 | 2023-05-09 | Windows NTLM Security Support Provider Information Disclosure Vulnerability |
CVE-2023-24899 | High | 7.0 | 2023-05-09 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-24898 | High | 7.5 | 2023-05-09 | Windows SMB Denial of Service Vulnerability |
CVE-2023-29354 | Medium | 4.7 | 2023-05-05 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-29350 | High | 7.5 | 2023-05-05 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-30268 | Critical | 9.8 | 2023-05-04 | CLTPHP <=6.0 is vulnerable to Improper Input Validation. |
CVE-2023-24461 | High | 7.4 | 2023-05-03 | An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM… |
CVE-2023-22372 | Medium | 5.9 | 2023-05-03 | In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software v… |
CVE-2022-3405 | High | 8.8 | 2023-05-03 | Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber P… |
CVE-2022-30995 | High | 7.5 | 2023-05-03 | Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29… |
CVE-2022-48482 | High | 7.5 | 2023-05-02 | 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directo… |
CVE-2023-26022 | Medium | 5.9 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs usi… |
CVE-2023-26021 | High | 7.5 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a s… |
CVE-2023-29334 | Medium | 4.3 | 2023-04-28 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-27555 | Medium | 5.1 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfe… |
CVE-2023-25930 | Medium | 5.9 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a… |
CVE-2023-28286 | Medium | 6.1 | 2023-04-27 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-28261 | Medium | 5.7 | 2023-04-27 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-21712 | High | 8.1 | 2023-04-27 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-29255 | High | 7.5 | 2023-04-27 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a var… |
CVE-2023-30846 | Critical | 9.1 | 2023-04-26 | typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or low… |
CVE-2023-27559 | Medium | 5.3 | 2023-04-26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using… |
CVE-2022-45456 | High | 7.5 | 2023-04-26 | Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161. |
CVE-2023-29257 | High | 7.2 | 2023-04-26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of on… |
CVE-2023-2282 | Medium | 6.5 | 2023-04-25 | Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass… |
CVE-2023-23838 | Medium | 6.5 | 2023-04-25 | Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server. |
CVE-2023-23837 | High | 7.5 | 2023-04-25 | No exception handling vulnerability which revealed sensitive or excessive information to users. |
CVE-2023-2257 | High | 7.8 | 2023-04-24 | Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access t… |
CVE-2023-25514 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into runn… |
CVE-2023-25513 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into runn… |
CVE-2023-25512 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump… |
CVE-2023-25511 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may l… |
CVE-2023-25510 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary… |
CVE-2023-1587 | Medium | 5.8 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus ve… |
CVE-2023-1586 | Medium | 6.5 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file cr… |
CVE-2023-1585 | Medium | 6.5 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary fil… |
CVE-2023-29413 | High | 7.5 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on th… |
CVE-2023-29412 | Critical | 9.8 | 2023-04-18 | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution… |
CVE-2023-29411 | Critical | 9.8 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remo… |
CVE-2023-24934 | Medium | 6.2 | 2023-04-14 | Microsoft Defender Security Feature Bypass Vulnerability |
CVE-2023-26416 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26415 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t… |
CVE-2023-26414 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-26413 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26412 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executi… |
CVE-2023-26411 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… |
CVE-2023-26410 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-26409 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… |
CVE-2023-26398 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… |
CVE-2023-26403 | Medium | 5.5 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-26402 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2023-26394 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |