Microsoft
Page 96 of 100 — Microsoft CVEs from a corpus of 27226, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-48482 | High | 7.5 | 2023-05-02 | 3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directo… |
CVE-2023-26022 | Medium | 5.9 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to a denial of service as the server may crash when an Out of Memory occurs usi… |
CVE-2023-26021 | High | 7.5 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to a denial of service as the server may crash when compiling a s… |
CVE-2023-29334 | Medium | 4.3 | 2023-04-28 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-27555 | Medium | 5.1 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 is vulnerable to a denial of service when attempting to use ACR client affinity for unfe… |
CVE-2023-25930 | Medium | 5.9 | 2023-04-28 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.1, 11.1, and 11.5 is vulnerable to a denial of service. Under rare conditions, setting a… |
CVE-2023-28286 | Medium | 6.1 | 2023-04-27 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-28261 | Medium | 5.7 | 2023-04-27 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-21712 | High | 8.1 | 2023-04-27 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-29255 | High | 7.5 | 2023-04-27 | IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as it may trap when compiling a var… |
CVE-2023-30846 | Critical | 9.1 | 2023-04-26 | typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or low… |
CVE-2023-27559 | Medium | 5.3 | 2023-04-26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service as the server may crash when using… |
CVE-2022-45456 | High | 7.5 | 2023-04-26 | Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161. |
CVE-2023-29257 | High | 7.2 | 2023-04-26 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to remote code execution as a database administrator of on… |
CVE-2023-2282 | Medium | 6.5 | 2023-04-25 | Improper access control in the Web Login listener in Devolutions Remote Desktop Manager 2023.1.22 and earlier on Windows allows an authenticated user to bypass… |
CVE-2023-23838 | Medium | 6.5 | 2023-04-25 | Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the server. |
CVE-2023-23837 | High | 7.5 | 2023-04-25 | No exception handling vulnerability which revealed sensitive or excessive information to users. |
CVE-2023-2257 | High | 7.8 | 2023-04-24 | Authentication Bypass in Hub Business integration in Devolutions Workspace Desktop 2023.1.1.3 and earlier on Windows and macOS allows an attacker with access t… |
CVE-2023-25514 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into runn… |
CVE-2023-25513 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into runn… |
CVE-2023-25512 | Medium | 5.3 | 2023-04-22 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump… |
CVE-2023-25511 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may l… |
CVE-2023-25510 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary… |
CVE-2023-1587 | Medium | 5.8 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus ve… |
CVE-2023-1586 | Medium | 6.5 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file cr… |
CVE-2023-1585 | Medium | 6.5 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary fil… |
CVE-2023-29413 | High | 7.5 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could cause Denial-of-Service when accessed by an unauthenticated user on th… |
CVE-2023-29412 | Critical | 9.8 | 2023-04-18 | CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote code execution… |
CVE-2023-29411 | Critical | 9.8 | 2023-04-18 | A CWE-306: Missing Authentication for Critical Function vulnerability exists that could allow changes to administrative credentials, leading to potential remo… |
CVE-2023-24934 | Medium | 6.2 | 2023-04-14 | Microsoft Defender Security Feature Bypass Vulnerability |
CVE-2023-26416 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26415 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in t… |
CVE-2023-26414 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-26413 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executio… |
CVE-2023-26412 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code executi… |
CVE-2023-26411 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… |
CVE-2023-26410 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the con… |
CVE-2023-26409 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… |
CVE-2023-26398 | High | 7.8 | 2023-04-13 | Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in… |
CVE-2023-26403 | Medium | 5.5 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-26402 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2023-26394 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… |
CVE-2023-26393 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2023-26392 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the contex… |
CVE-2023-26391 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2023-26390 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-26389 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a r… |
CVE-2023-26388 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution i… |
CVE-2023-26387 | Medium | 5.5 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitiv… |
CVE-2023-26386 | Medium | 5.5 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could lead to disclosure of sensitiv… |
CVE-2023-26385 | Medium | 5.5 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-26384 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the contex… |
CVE-2023-26383 | High | 7.8 | 2023-04-12 | Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… |
CVE-2023-22235 | High | 7.8 | 2023-04-12 | InCopy versions 18.1 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the cont… |
CVE-2023-26425 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability when parsing a craf… |
CVE-2023-26424 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26423 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26422 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26421 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Integer Underflow or Wraparound vulnerability that c… |
CVE-2023-26420 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26419 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26418 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26417 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Use After Free vulnerability that could result in arb… |
CVE-2023-26408 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could res… |
CVE-2023-26407 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could r… |
CVE-2023-26406 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Access Control vulnerability that could res… |
CVE-2023-26405 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an Improper Input Validation vulnerability that could r… |
CVE-2023-26397 | Medium | 5.5 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to… |
CVE-2023-26396 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrec… |
CVE-2023-26395 | High | 7.8 | 2023-04-12 | Adobe Acrobat Reader versions 23.001.20093 (and earlier) and 20.005.30441 (and earlier) are affected by an out-of-bounds write vulnerability that could result… |
CVE-2023-26404 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26401 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26400 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26382 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26381 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26380 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26379 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26378 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26377 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26376 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26375 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26374 | Medium | 5.5 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker c… |
CVE-2023-26373 | High | 7.8 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2023-26372 | High | 7.8 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of… |
CVE-2023-26371 | High | 7.8 | 2023-04-12 | Adobe Dimension version 3.4.8 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past t… |
CVE-2023-24513 | Medium | 6.5 | 2023-04-12 | On affected platforms running Arista CloudEOS an issue in the Software Forwarding Engine (Sfe) can lead to a potential denial of service attack by sending malf… |
CVE-2023-28314 | Medium | 6.1 | 2023-04-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-28313 | Medium | 6.1 | 2023-04-11 | Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability |
CVE-2023-28312 | Medium | 6.5 | 2023-04-11 | Azure Machine Learning Information Disclosure Vulnerability |
CVE-2023-28311 | High | 7.8 | 2023-04-11 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-28309 | High | 7.6 | 2023-04-11 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-28308 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28307 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28306 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28305 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28304 | High | 7.8 | 2023-04-11 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability |
CVE-2023-28302 | High | 7.5 | 2023-04-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-28301 | Low | 3.7 | 2023-04-11 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-28300 | High | 7.5 | 2023-04-11 | Azure Service Connector Security Feature Bypass Vulnerability |
CVE-2023-28299 | Medium | 5.5 | 2023-04-11 | Visual Studio Spoofing Vulnerability |