Microsoft
Page 90 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21567 | Medium | 5.6 | 2023-02-14 | Visual Studio Denial of Service Vulnerability |
CVE-2023-21566 | High | 7.8 | 2023-02-14 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-21553 | High | 7.5 | 2023-02-14 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2023-23390 | High | 7.8 | 2023-02-14 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-23382 | Medium | 6.5 | 2023-02-14 | Azure Machine Learning Compute Instance Information Disclosure Vulnerability |
CVE-2023-23379 | High | 7.8 | 2023-02-14 | Microsoft Defender for IoT Elevation of Privilege Vulnerability |
CVE-2023-23378 | High | 7.8 | 2023-02-14 | Print 3D Remote Code Execution Vulnerability |
CVE-2023-23377 | High | 7.8 | 2023-02-14 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-23376 | High | 7.8 | 2023-02-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-23374 | High | 8.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-21822 | High | 7.8 | 2023-02-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-21820 | High | 7.4 | 2023-02-14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2023-21819 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21818 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21817 | High | 7.8 | 2023-02-14 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2023-21816 | High | 7.5 | 2023-02-14 | Windows Active Directory Domain Services API Denial of Service Vulnerability |
CVE-2023-21813 | High | 7.5 | 2023-02-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-21812 | High | 7.8 | 2023-02-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-21811 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21809 | High | 7.8 | 2023-02-14 | Microsoft Defender for Endpoint Security Feature Bypass Vulnerability |
CVE-2023-21807 | Medium | 6.5 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21806 | High | 8.2 | 2023-02-14 | Power BI Report Server Spoofing Vulnerability |
CVE-2023-21805 | High | 7.8 | 2023-02-14 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2023-21804 | High | 7.8 | 2023-02-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-21803 | Critical | 9.8 | 2023-02-14 | Windows iSCSI Discovery Service Remote Code Execution Vulnerability |
CVE-2023-21802 | High | 7.8 | 2023-02-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-21801 | High | 7.8 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-21800 | High | 7.8 | 2023-02-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-21799 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21798 | High | 8.8 | 2023-02-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21797 | High | 8.8 | 2023-02-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21794 | Medium | 4.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-21777 | High | 8.7 | 2023-02-14 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability |
CVE-2023-21722 | Medium | 5.0 | 2023-02-14 | .NET Framework Denial of Service Vulnerability |
CVE-2023-21721 | Medium | 6.5 | 2023-02-14 | Microsoft OneNote Elevation of Privilege Vulnerability |
CVE-2023-21720 | Medium | 5.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-21718 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21717 | High | 8.8 | 2023-02-14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-21715 | High | 7.3 | 2023-02-14 | Microsoft Publisher Security Feature Bypass Vulnerability |
CVE-2023-21714 | Medium | 5.5 | 2023-02-14 | Microsoft Office Information Disclosure Vulnerability |
CVE-2023-21713 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21710 | High | 7.2 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21707 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21706 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21705 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21704 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21703 | Medium | 6.5 | 2023-02-14 | Azure Data Box Gateway Remote Code Execution Vulnerability |
CVE-2023-21702 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21701 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
CVE-2023-21700 | High | 7.5 | 2023-02-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2023-21699 | Medium | 5.3 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21697 | Medium | 6.2 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21695 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21694 | Medium | 6.8 | 2023-02-14 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-21693 | Medium | 5.7 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-21692 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21691 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |
CVE-2023-21690 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21689 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21688 | High | 7.8 | 2023-02-14 | NT OS Kernel Elevation of Privilege Vulnerability |
CVE-2023-21687 | Medium | 5.5 | 2023-02-14 | HTTP.sys Information Disclosure Vulnerability |
CVE-2023-21686 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21685 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21684 | High | 8.8 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-21573 | Medium | 5.4 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21572 | Medium | 6.5 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21571 | Medium | 5.4 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21570 | Medium | 5.4 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21568 | High | 7.3 | 2023-02-14 | Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability |
CVE-2023-21564 | High | 7.1 | 2023-02-14 | Azure DevOps Server Cross-Site Scripting Vulnerability |
CVE-2023-21529 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21528 | High | 7.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2022-45455 | High | 7.8 | 2023-02-13 | Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before bu… |
CVE-2022-45454 | High | 7.5 | 2023-02-13 | Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis C… |
CVE-2022-42444 | Medium | 4.9 | 2023-02-12 | IBM App Connect Enterprise 11.0.0.8 through 11.0.0.19 and 12.0.1.0 through 12.0.5.0 is vulnerable to a buffer overflow. A remote privileged user could overflow… |
CVE-2022-42436 | Medium | 4.0 | 2023-02-12 | IBM MQ 8.0.0, 9.0.0, 9.1.0, 9.2.0, 9.3.0 Managed File Transfer could allow a local user to obtain sensitive information from diagnostic files. IBM X-Force ID… |
CVE-2022-42292 | Medium | 5.0 | 2023-02-12 | NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic link to a… |
CVE-2022-38396 | High | 7.8 | 2023-02-12 | HP Factory Preinstalled Images on certain systems that shipped with Windows 10 versions 20H2 and earlier OS versions might allow escalation of privilege via ex… |
CVE-2023-24816 | Medium | 4.5 | 2023-02-10 | IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming la… |
CVE-2022-43550 | Critical | 9.8 | 2023-02-09 | A command injection vulnerability exists in Jitsi before commit 8aa7be58522f4264078d54752aae5483bfd854b2 when launching browsers on Windows which could allow a… |
CVE-2023-0575 | High | 7.2 | 2023-02-09 | External Control of Critical State Data, Improper Control of Generation of Code ('Code Injection') vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linu… |
CVE-2022-38777 | High | 7.8 | 2023-02-08 | An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to t… |
CVE-2023-23475 | Medium | 4.6 | 2023-02-08 | IBM Infosphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-35720 | Low | 2.3 | 2023-02-08 | IBM Sterling External Authentication Server 6.1.0 and IBM Sterling Secure Proxy 6.0.3 uses weaker than expected cryptographic algorithms during installation th… |
CVE-2022-34362 | Medium | 4.6 | 2023-02-08 | IBM Sterling Secure Proxy 6.0.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attack… |
CVE-2023-0002 | Medium | 5.5 | 2023-02-08 | A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands t… |
CVE-2023-0001 | Medium | 6.0 | 2023-02-08 | An information exposure vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local system administrator to disclose the admin p… |
CVE-2022-42291 | High | 8.2 | 2023-02-07 | NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete d… |
CVE-2022-31611 | Medium | 6.8 | 2023-02-07 | NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may ca… |
CVE-2022-3229 | Critical | 9.8 | 2023-02-06 | Because the web management interface for Unified Intents' Unified Remote solution does not itself require authentication, a remote, unauthenticated attacker ca… |
CVE-2022-42439 | Medium | 6.8 | 2023-02-06 | IBM App Connect Enterprise 11.0.0.17 through 11.0.0.19 and 12.0.4.0 and 12.0.5.0 contains an unspecified vulnerability in the Discovery Connector nodes which… |
CVE-2023-23477 | High | 8.1 | 2023-02-03 | IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequenc… |
CVE-2023-20854 | High | 8.4 | 2023-02-03 | VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vul… |
CVE-2023-0400 | Medium | 5.9 | 2023-02-02 | The protection bypass vulnerability in DLP for Windows 11.9.x is addressed in version 11.10.0. This allowed a local user to bypass DLP controls when uploading… |
CVE-2022-47983 | Medium | 5.4 | 2023-02-01 | IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI… |
CVE-2022-42973 | High | 7.8 | 2023-02-01 | A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affecte… |
CVE-2022-42972 | High | 7.8 | 2023-02-01 | A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifie… |
CVE-2022-42971 | Critical | 9.8 | 2023-02-01 | A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could cause remote code execution when the attacker uploads a malicious JS… |
CVE-2022-42970 | Critical | 9.8 | 2023-02-01 | A CWE-306: Missing Authentication for Critical Function The software does not perform any authentication for functionality that requires a provable user identi… |