Microsoft
Page 91 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-28331 | Critical | 9.8 | 2023-01-31 | On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a result of integer overf… |
CVE-2021-46873 | Medium | 5.3 | 2023-01-29 | WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a fu… |
CVE-2023-22242 | High | 7.8 | 2023-01-27 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2023-22241 | High | 7.8 | 2023-01-27 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2023-22240 | High | 7.8 | 2023-01-27 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2022-47632 | Medium | 6.8 | 2023-01-27 | Razer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate va… |
CVE-2022-4510 | High | 7.8 | 2023-01-26 | A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, a… |
CVE-2022-48199 | High | 8.8 | 2023-01-26 | SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to execute a malicious binary with potentially higher privileges via a low-privileged user account that… |
CVE-2022-43917 | Medium | 5.9 | 2023-01-26 | IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensit… |
CVE-2022-38775 | High | 7.8 | 2023-01-26 | An issue was discovered in the rollback feature of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to t… |
CVE-2022-38774 | High | 7.8 | 2023-01-26 | An issue was discovered in the quarantine feature of Elastic Endpoint Security and Elastic Endgame for Windows, which could allow unprivileged users to elevate… |
CVE-2023-21796 | High | 8.3 | 2023-01-24 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-21795 | High | 8.3 | 2023-01-24 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-21775 | High | 8.3 | 2023-01-24 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2023-21719 | Medium | 6.5 | 2023-01-24 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-24069 | Low | 3.3 | 2023-01-23 | Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to obtain potentially sensitive attachments sent in messages from the attachments.n… |
CVE-2023-24068 | High | 7.8 | 2023-01-23 | Signal Desktop before 6.2.0 on Windows, Linux, and macOS allows an attacker to modify conversation attachments within the attachments.noindex directory. Client… |
CVE-2022-41733 | Medium | 5.3 | 2023-01-20 | IBM InfoSphere Information Server 11.7 could allow a remote attacked to cause some of the components to be unusable until the process is restarted. IBM X-Forc… |
CVE-2021-26644 | High | 8.8 | 2023-01-20 | SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker… |
CVE-2021-26642 | High | 8.8 | 2023-01-20 | When uploading an image file to a bulletin board developed with XpressEngine, a vulnerability in which an arbitrary file can be uploaded due to insufficient ve… |
CVE-2022-48191 | High | 7.0 | 2023-01-20 | A vulnerability exists in Trend Micro Maximum Security 2022 (17.7) wherein a low-privileged user can write a known malicious executable to a specific location… |
CVE-2023-22863 | Medium | 5.9 | 2023-01-18 | IBM Robotic Process Automation 20.12.0 through 21.0.2 defaults to HTTP in some RPA commands when the prefix is not explicitly specified in the URL. This could… |
CVE-2023-22594 | Medium | 4.6 | 2023-01-18 | IBM Robotic Process Automation for Cloud Pak 20.12.0 through 21.0.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2023-21614 | Medium | 5.5 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2023-21613 | Medium | 5.5 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2023-21612 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary Fil… |
CVE-2023-21611 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary Fil… |
CVE-2023-21610 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overfl… |
CVE-2023-21609 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2023-21608 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerabil… |
CVE-2023-21607 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Improper Input Validatio… |
CVE-2023-21606 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vuln… |
CVE-2023-21605 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflo… |
CVE-2023-21604 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overfl… |
CVE-2023-21585 | Medium | 5.5 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2023-21581 | Medium | 5.5 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulne… |
CVE-2023-21579 | High | 7.8 | 2023-01-18 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Integer Overflow or Wrap… |
CVE-2023-21603 | Medium | 5.5 | 2023-01-18 | Adobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker… |
CVE-2023-21601 | Medium | 5.5 | 2023-01-18 | Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could… |
CVE-2022-41953 | High | 8.6 | 2023-01-17 | Git GUI is a convenient graphical tool that comes with Git for Windows. Its target audience is users who are uncomfortable with using Git on the command-line… |
CVE-2022-4258 | High | 7.8 | 2023-01-16 | In multiple versions of HIMA PC based Software an unquoted Windows search path vulnerability might allow local users to gain privileges via a malicious .exe fi… |
CVE-2023-21599 | Medium | 5.5 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… |
CVE-2023-21598 | Medium | 5.5 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory… |
CVE-2023-21597 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… |
CVE-2023-21596 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code exe… |
CVE-2023-21595 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution… |
CVE-2023-21594 | High | 7.8 | 2023-01-13 | Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code exe… |
CVE-2023-21592 | Medium | 5.5 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive me… |
CVE-2023-21591 | Medium | 5.5 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive me… |
CVE-2023-21590 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code executio… |
CVE-2023-21589 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code executio… |
CVE-2023-21588 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code ex… |
CVE-2023-21587 | High | 7.8 | 2023-01-13 | Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code ex… |
CVE-2023-22947 | High | 7.3 | 2023-01-11 | Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate… |
CVE-2023-21793 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21792 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21791 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21790 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21789 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21788 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21787 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21786 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21785 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21784 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21783 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21782 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21781 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21780 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21779 | High | 7.8 | 2023-01-10 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2023-21776 | Medium | 5.5 | 2023-01-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-21774 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21773 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21772 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21771 | High | 7.0 | 2023-01-10 | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
CVE-2023-21768 | High | 7.8 | 2023-01-10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2023-21767 | High | 7.8 | 2023-01-10 | Windows Overlay Filter Elevation of Privilege Vulnerability |
CVE-2023-21766 | Medium | 4.7 | 2023-01-10 | Windows Overlay Filter Information Disclosure Vulnerability |
CVE-2023-21765 | High | 7.8 | 2023-01-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2023-21764 | High | 7.8 | 2023-01-10 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-21763 | High | 7.8 | 2023-01-10 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-21762 | High | 8.0 | 2023-01-10 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-21761 | High | 7.5 | 2023-01-10 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2023-21760 | High | 7.1 | 2023-01-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2023-21759 | Low | 3.3 | 2023-01-10 | Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability |
CVE-2023-21758 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21757 | High | 7.5 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability |
CVE-2023-21755 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21754 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21753 | Medium | 5.5 | 2023-01-10 | Event Tracing for Windows Information Disclosure Vulnerability |
CVE-2023-21752 | High | 7.1 | 2023-01-10 | Windows Backup Service Elevation of Privilege Vulnerability |
CVE-2023-21750 | High | 7.1 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21749 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21748 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21747 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21746 | High | 7.8 | 2023-01-10 | Windows NTLM Elevation of Privilege Vulnerability |
CVE-2023-21745 | High | 8.0 | 2023-01-10 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-21744 | High | 8.8 | 2023-01-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-21743 | Medium | 5.3 | 2023-01-10 | Microsoft SharePoint Server Security Feature Bypass Vulnerability |
CVE-2023-21742 | High | 8.8 | 2023-01-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-21741 | High | 7.1 | 2023-01-10 | Microsoft Office Visio Information Disclosure Vulnerability |