Microsoft
Page 92 of 100 — Microsoft CVEs from a corpus of 26181, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21739 | High | 7.0 | 2023-01-10 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2023-21738 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21737 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21736 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21735 | High | 7.8 | 2023-01-10 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-21734 | High | 7.8 | 2023-01-10 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-21733 | High | 7.0 | 2023-01-10 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-21732 | High | 8.8 | 2023-01-10 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21730 | High | 7.8 | 2023-01-10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
CVE-2023-21728 | High | 7.5 | 2023-01-10 | Windows Netlogon Denial of Service Vulnerability |
CVE-2023-21726 | High | 7.8 | 2023-01-10 | Windows Credential Manager User Interface Elevation of Privilege Vulnerability |
CVE-2023-21725 | Medium | 6.3 | 2023-01-10 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability |
CVE-2023-21724 | High | 7.8 | 2023-01-10 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2023-21683 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21682 | Medium | 5.3 | 2023-01-10 | Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability |
CVE-2023-21681 | High | 8.8 | 2023-01-10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21680 | High | 7.8 | 2023-01-10 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-21679 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21678 | High | 7.8 | 2023-01-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2023-21677 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21676 | High | 8.8 | 2023-01-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-21675 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21674 | High | 8.8 | 2023-01-10 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2023-21563 | Medium | 6.8 | 2023-01-10 | BitLocker Security Feature Bypass Vulnerability |
CVE-2023-21561 | High | 7.8 | 2023-01-10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
CVE-2023-21560 | Medium | 6.6 | 2023-01-10 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2023-21559 | Medium | 5.5 | 2023-01-10 | Windows Cryptographic Information Disclosure Vulnerability |
CVE-2023-21558 | High | 7.8 | 2023-01-10 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-21557 | High | 7.5 | 2023-01-10 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2023-21556 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21555 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21552 | High | 7.8 | 2023-01-10 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-21551 | High | 7.8 | 2023-01-10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
CVE-2023-21550 | Medium | 5.5 | 2023-01-10 | Windows Cryptographic Information Disclosure Vulnerability |
CVE-2023-21549 | High | 8.8 | 2023-01-10 | Windows SMB Witness Service Elevation of Privilege Vulnerability |
CVE-2023-21548 | High | 8.1 | 2023-01-10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-21547 | High | 7.5 | 2023-01-10 | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
CVE-2023-21546 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21543 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21542 | High | 7.0 | 2023-01-10 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-21541 | High | 7.8 | 2023-01-10 | Windows Task Scheduler Elevation of Privilege Vulnerability |
CVE-2023-21540 | Medium | 5.5 | 2023-01-10 | Windows Cryptographic Information Disclosure Vulnerability |
CVE-2023-21539 | High | 7.5 | 2023-01-10 | Windows Authentication Remote Code Execution Vulnerability |
CVE-2023-21538 | High | 7.5 | 2023-01-10 | .NET Denial of Service Vulnerability |
CVE-2023-21537 | High | 7.8 | 2023-01-10 | Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability |
CVE-2023-21536 | Medium | 4.7 | 2023-01-10 | Event Tracing for Windows Information Disclosure Vulnerability |
CVE-2023-21535 | High | 8.1 | 2023-01-10 | Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability |
CVE-2023-21532 | High | 7.0 | 2023-01-10 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-21531 | High | 7.0 | 2023-01-10 | Azure Service Fabric Container Elevation of Privilege Vulnerability |
CVE-2023-21527 | High | 7.5 | 2023-01-10 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21525 | Medium | 5.3 | 2023-01-10 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-21524 | High | 7.8 | 2023-01-10 | Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability |
CVE-2023-0140 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in File System API in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass file system restricti… |
CVE-2023-0139 | Medium | 6.5 | 2023-01-10 | Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to bypass download restric… |
CVE-2023-0132 | Medium | 6.5 | 2023-01-10 | Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 109.0.5414.74 allowed a remote attacker to force acceptance of a per… |
CVE-2022-4294 | High | 7.1 | 2023-01-10 | Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may… |
CVE-2023-0012 | Medium | 6.4 | 2023-01-10 | In SAP Host Agent (Windows) - versions 7.21, 7.22, an attacker who gains local membership to SAP_LocalAdmin could be able to replace executables with a malicio… |
CVE-2022-43573 | Low | 3.1 | 2023-01-05 | IBM Robotic Process Automation 20.12 through 21.0.6 is vulnerable to exposure of the name and email for the creator/modifier of platform level objects. IBM X-… |
CVE-2022-41740 | Medium | 4.6 | 2023-01-05 | IBM Robotic Process Automation 20.12 through 21.0.6 could allow an attacker with physical access to the system to obtain highly sensitive information from sys… |
CVE-2022-43535 | High | 7.8 | 2023-01-05 | A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit… |
CVE-2022-34330 | Medium | 6.1 | 2023-01-05 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary… |
CVE-2022-22371 | Medium | 5.5 | 2023-01-05 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.1 does not invalidate session after a password change which could allow an authenticated use… |
CVE-2022-45052 | High | 8.8 | 2023-01-04 | A Local File Inclusion vulnerability has been found in Axiell Iguana CMS. Due to insufficient neutralisation of user input on the url parameter on the Proxy.ty… |
CVE-2022-45051 | Medium | 6.1 | 2023-01-04 | A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The module parameter on the Serv… |
CVE-2022-45049 | Medium | 6.1 | 2023-01-04 | A reflected XSS vulnerability has been found in Axiell Iguana CMS, allowing an attacker to execute code in a victim's browser. The url parameter on the novelis… |
CVE-2020-36639 | Medium | 4.3 | 2023-01-04 | A vulnerability has been found in AlliedModders AMX Mod X on Windows and classified as critical. This vulnerability affects the function cmdVoteMap of the file… |
CVE-2022-0337 | Medium | 6.5 | 2023-01-02 | Inappropriate implementation in File System API in Google Chrome on Windows prior to 97.0.4692.71 allowed a remote attacker to obtain potentially sensitive inf… |
CVE-2022-42267 | High | 7.0 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code execution, denial o… |
CVE-2022-42266 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivileged regular… |
CVE-2022-34683 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a null-pointer derefere… |
CVE-2022-34681 | Medium | 5.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler, where improper input validation of a display-re… |
CVE-2022-34678 | Medium | 6.5 | 2022-12-30 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause a null-pointer derefere… |
CVE-2022-34672 | High | 7.8 | 2022-12-30 | NVIDIA Control Panel for Windows contains a vulnerability where an unauthorized user or an unprivileged regular user can compromise the security of the softwar… |
CVE-2022-34669 | High | 8.8 | 2022-12-30 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or… |
CVE-2022-45434 | Medium | 5.9 | 2022-12-27 | Some Dahua software products have a vulnerability of unauthenticated un-throttled ICMP requests on remote DSS Server. After bypassing the firewall access contr… |
CVE-2022-45433 | Low | 3.7 | 2022-12-27 | Some Dahua software products have a vulnerability of unauthenticated traceroute host from remote DSS Server. After bypassing the firewall access control policy… |
CVE-2022-45432 | Medium | 5.3 | 2022-12-27 | Some Dahua software products have a vulnerability of unauthenticated search for devices. After bypassing the firewall access control policy, by sending a speci… |
CVE-2021-4287 | Medium | 5.0 | 2022-12-27 | A vulnerability, which was classified as problematic, was found in ReFirm Labs binwalk up to 2.3.2. Affected is an unknown function of the file src/binwalk/mod… |
CVE-2022-46764 | Critical | 9.8 | 2022-12-27 | A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows remote unauthenticated attackers to execute arbitrary SQL com… |
CVE-2022-46763 | High | 8.8 | 2022-12-27 | A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 (fixed in 5.2.6.10025) allows a low-privileged database user to execute arbi… |
CVE-2022-45798 | High | 7.8 | 2022-12-24 | A link following vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacke… |
CVE-2022-38658 | High | 7.7 | 2022-12-24 | BigFix deployments that have installed the Notification Service on Windows are susceptible to disclosing SMTP BigFix operator's sensitive data in clear text. O… |
CVE-2022-36314 | Medium | 5.5 | 2022-12-22 | When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that would lead to unexpected network requests from the opera… |
CVE-2022-35646 | Medium | 5.9 | 2022-12-22 | IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access reque… |
CVE-2022-34478 | Medium | 6.5 | 2022-12-22 | The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing the browser, when a us… |
CVE-2022-31739 | High | 8.8 | 2022-12-22 | When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths th… |
CVE-2022-22753 | High | 7.1 | 2022-12-22 | A Time-of-Check Time-of-Use bug existed in the Maintenance (Updater) Service that could be abused to grant Users write access to an arbitrary directory. This c… |
CVE-2022-22750 | Medium | 6.5 | 2022-12-22 | By generally accepting and passing resource handles across processes, a compromised content process might have confused higher privileged processes to interact… |
CVE-2022-22746 | Medium | 5.9 | 2022-12-22 | A race condition could have allowed bypassing the fullscreen notification which could have lead to a fullscreen window spoof being unnoticed.<br>*This bug only… |
CVE-2022-22744 | High | 8.8 | 2022-12-22 | The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to command injection if… |
CVE-2022-23551 | Medium | 5.3 | 2022-12-21 | aad-pod-identity assigns Azure Active Directory identities to Kubernetes applications and has now been deprecated as of 24 October 2022. The NMI component in A… |
CVE-2022-38391 | Medium | 5.1 | 2022-12-20 | IBM Spectrum Control 5.4 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force… |
CVE-2022-47512 | Medium | 5.5 | 2022-12-19 | Sensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability (HCO)/ SolarWinds Plat… |
CVE-2022-38659 | Medium | 6.0 | 2022-12-19 | In specific scenarios, on Windows the operator credentials may be encrypted in a manner that is not completely machine-dependent. |
CVE-2022-4326 | Medium | 5.5 | 2022-12-16 | Improper preservation of permissions vulnerability in Trellix Endpoint Agent (xAgent) prior to V35.31.22 on Windows allows a local user with administrator priv… |
CVE-2022-44502 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44500 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44499 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-44498 | Medium | 5.5 | 2022-12-16 | Adobe Illustrator versions 26.5.1 (and earlier), and 27.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2022-42343 | Medium | 6.5 | 2022-12-16 | Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitr… |