Microsoft
Page 89 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23406 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23405 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-23404 | High | 8.1 | 2023-03-14 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-23403 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23402 | High | 7.8 | 2023-03-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-23401 | High | 7.8 | 2023-03-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-23400 | High | 7.2 | 2023-03-14 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-23399 | High | 7.8 | 2023-03-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-23398 | High | 7.1 | 2023-03-14 | Microsoft Excel Spoofing Vulnerability |
CVE-2023-23397 | Critical | 9.8 | 2023-03-14 | Microsoft Outlook Elevation of Privilege Vulnerability |
CVE-2023-23396 | Medium | 6.5 | 2023-03-14 | Microsoft Excel Denial of Service Vulnerability |
CVE-2023-23395 | Low | 3.1 | 2023-03-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-23394 | Medium | 5.5 | 2023-03-14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
CVE-2023-23393 | High | 7.0 | 2023-03-14 | Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability |
CVE-2023-23392 | Critical | 9.8 | 2023-03-14 | HTTP Protocol Stack Remote Code Execution Vulnerability |
CVE-2023-23391 | Medium | 5.5 | 2023-03-14 | Office for Android Spoofing Vulnerability |
CVE-2023-23389 | Medium | 6.3 | 2023-03-14 | Microsoft Defender Elevation of Privilege Vulnerability |
CVE-2023-23388 | High | 8.8 | 2023-03-14 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2023-23385 | High | 7.0 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability |
CVE-2023-23383 | High | 8.2 | 2023-03-14 | Service Fabric Explorer Spoofing Vulnerability |
CVE-2023-21708 | Critical | 9.8 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-25148 | High | 7.8 | 2023-03-10 | A security agent link following vulnerability in Trend Micro Apex One could allow a local attacker to exploit the vulnerability by changing a specific file int… |
CVE-2023-25147 | Medium | 6.7 | 2023-03-10 | An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via other means to bypass the protection b… |
CVE-2023-25146 | High | 7.8 | 2023-03-10 | A security agent link following vulnerability in the Trend Micro Apex One agent could allow a local attacker to quarantine a file, delete the original folder a… |
CVE-2023-25145 | High | 7.8 | 2023-03-10 | A link following vulnerability in the scanning function of Trend Micro Apex One agent could allow a local attacker to escalate privileges on affected installat… |
CVE-2023-25144 | High | 7.8 | 2023-03-10 | An improper access control vulnerability in the Trend Micro Apex One agent could allow a local attacker to gain elevated privileges and create arbitrary direct… |
CVE-2023-25143 | Critical | 9.8 | 2023-03-10 | An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state… |
CVE-2023-0193 | Medium | 4.4 | 2023-03-10 | NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read… |
CVE-2023-1217 | Medium | 6.5 | 2023-03-07 | Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process… |
CVE-2023-1003 | Medium | 5.3 | 2023-03-07 | A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Han… |
CVE-2023-23939 | Low | 3.9 | 2023-03-06 | Azure/setup-kubectl is a GitHub Action for installing Kubectl. This vulnerability only impacts versions before version 3. An insecure temporary creation of a f… |
CVE-2023-1188 | Low | 3.3 | 2023-03-06 | A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42. It has been classified as problematic. Affected is the function 0x222018 in the libra… |
CVE-2023-1187 | Low | 3.3 | 2023-03-06 | A vulnerability was found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This issue affects some unknown processing in the libra… |
CVE-2023-1186 | Low | 3.3 | 2023-03-06 | A vulnerability has been found in FabulaTech Webcam for Remote Desktop 2.8.42 and classified as problematic. This vulnerability affects the function 0x222010/0… |
CVE-2023-0196 | Low | 3.3 | 2023-03-02 | NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, w… |
CVE-2023-26281 | Medium | 5.9 | 2023-03-01 | IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force… |
CVE-2023-1017 | High | 7.8 | 2023-02-28 | An out-of-bounds write vulnerability exists in TPM2.0's Module Library allowing writing of a 2-byte data past the end of TPM2.0 command in the CryptParameterDe… |
CVE-2023-1018 | Medium | 5.5 | 2023-02-28 | An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption r… |
CVE-2022-41722 | High | 7.5 | 2023-02-28 | A path traversal vulnerability exists in filepath.Clean on Windows. On Windows, the filepath.Clean function could transform an invalid path such as "a/../c:/b"… |
CVE-2022-3884 | High | 7.3 | 2023-02-28 | Incorrect Default Permissions vulnerability in Hitachi Ops Center Analyzer on Windows (Hitachi Ops Center Analyzer RAID Agent component) allows local users to… |
CVE-2023-1048 | Medium | 5.3 | 2023-02-26 | A vulnerability, which was classified as critical, has been found in TechPowerUp Ryzen DRAM Calculator 1.2.0.5. This issue affects some unknown processing in t… |
CVE-2023-1004 | Medium | 5.3 | 2023-02-24 | A vulnerability has been found in MarkText up to 0.17.1 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of th… |
CVE-2023-0755 | Critical | 9.8 | 2023-02-23 | The affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrar… |
CVE-2023-0754 | Critical | 9.8 | 2023-02-23 | The affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary c… |
CVE-2023-0932 | High | 8.8 | 2023-02-22 | Use after free in WebRTC in Google Chrome on Windows prior to 110.0.5481.177 allowed a remote attacker who convinced the user to engage in specific UI interact… |
CVE-2022-43578 | Medium | 4.6 | 2023-02-22 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allo… |
CVE-2023-20858 | High | 7.2 | 2023-02-22 | VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8.9.4 contain an injection vulnerability. A malicious actor with… |
CVE-2023-25928 | Medium | 4.6 | 2023-02-21 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2023-22246 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code executi… |
CVE-2023-22244 | High | 7.8 | 2023-02-17 | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2023-22243 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-22239 | High | 7.8 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code… |
CVE-2023-22238 | High | 7.8 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut… |
CVE-2023-22237 | High | 7.8 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut… |
CVE-2023-22236 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-22234 | High | 7.8 | 2023-02-17 | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2023-22233 | Medium | 5.5 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2023-22231 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-22230 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22229 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22228 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary c… |
CVE-2023-22227 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22226 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-21622 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21621 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execu… |
CVE-2023-21620 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21619 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21593 | Medium | 5.5 | 2023-02-17 | Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker cou… |
CVE-2023-21584 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-21583 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-21578 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21577 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21576 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21575 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21574 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execu… |
CVE-2023-24960 | High | 7.5 | 2023-02-17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL requ… |
CVE-2022-43579 | Medium | 4.6 | 2023-02-17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 is vulnerable to cross-site scripting. This vulnerability allo… |
CVE-2022-40231 | Medium | 4.3 | 2023-02-17 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.0 could allow an authenticated user to perform unauthorized acti… |
CVE-2023-26020 | Medium | 5.7 | 2023-02-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit… |
CVE-2022-43930 | Medium | 6.2 | 2023-02-17 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to an Information Disclosure as sensitive information may be included in a log file. IB… |
CVE-2022-40232 | Medium | 6.3 | 2023-02-17 | IBM Sterling B2B Integrator Standard Edition 6.1.0.0 through 6.1.1.1, and 6.1.2.0 could allow an authenticated user to perform actions they should not have ac… |
CVE-2023-24964 | Medium | 6.2 | 2023-02-17 | IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463. |
CVE-2023-22868 | Medium | 5.4 | 2023-02-17 | IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t… |
CVE-2022-43929 | Medium | 4.9 | 2023-02-17 | IBM Db2 for Linux, UNIX and Windows 11.1 and 11.5 may be vulnerable to a Denial of Service when executing a specially crafted 'Load' command. IBM X-Force ID… |
CVE-2022-43927 | Medium | 5.9 | 2023-02-17 | IBM Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 is vulnerable to information Disclosure due to improper privilege management when a specially crafted… |
CVE-2022-47986 | Critical | 9.8 | 2023-02-17 | IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw… |
CVE-2023-0882 | High | 8.8 | 2023-02-17 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This i… |
CVE-2022-27808 | Medium | 6.3 | 2023-02-16 | Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenti… |
CVE-2022-34849 | Medium | 4.4 | 2023-02-16 | Uncaught exception in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1436(v2) may allow a privileged user to potentially enable denial… |
CVE-2022-30531 | Medium | 4.4 | 2023-02-16 | Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information… |
CVE-2022-26841 | Low | 2.5 | 2023-02-16 | Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an authenticated user to potentially enabl… |
CVE-2022-26509 | Low | 2.5 | 2023-02-16 | Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access. |
CVE-2023-24483 | High | 7.8 | 2023-02-16 | A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual… |
CVE-2023-23459 | Critical | 9.1 | 2023-02-15 | Priority Windows may allow Command Execution via SQL Injection using an unspecified method. |
CVE-2023-22368 | High | 7.8 | 2023-02-15 | Untrusted search path vulnerability in ELECOM Camera Assistant 1.00 and QuickFileDealer Ver.1.2.1 and earlier allows an attacker to gain privileges via a Troja… |
CVE-2023-23381 | High | 7.8 | 2023-02-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21823 | High | 7.8 | 2023-02-14 | Windows Graphics Component Remote Code Execution Vulnerability |
CVE-2023-21815 | High | 7.8 | 2023-02-14 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21808 | High | 7.8 | 2023-02-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-21778 | High | 8.0 | 2023-02-14 | Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability |