Microsoft
Page 97 of 100 — Microsoft CVEs from a corpus of 27226, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28298 | Medium | 5.5 | 2023-04-11 | Windows Kernel Denial of Service Vulnerability |
CVE-2023-28297 | High | 8.8 | 2023-04-11 | Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability |
CVE-2023-28296 | High | 7.8 | 2023-04-11 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-28293 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28292 | High | 7.8 | 2023-04-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-28291 | High | 8.4 | 2023-04-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-28288 | High | 8.1 | 2023-04-11 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-28285 | High | 7.8 | 2023-04-11 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-28284 | Medium | 4.3 | 2023-04-11 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-28278 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28277 | Medium | 4.9 | 2023-04-11 | Windows DNS Server Information Disclosure Vulnerability |
CVE-2023-28276 | Medium | 4.4 | 2023-04-11 | Windows Group Policy Security Feature Bypass Vulnerability |
CVE-2023-28275 | High | 8.8 | 2023-04-11 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-28274 | High | 7.8 | 2023-04-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-28273 | High | 7.0 | 2023-04-11 | Windows Clip Service Elevation of Privilege Vulnerability |
CVE-2023-28272 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28271 | Medium | 5.5 | 2023-04-11 | Windows Kernel Memory Information Disclosure Vulnerability |
CVE-2023-28270 | Medium | 6.8 | 2023-04-11 | Windows Lock Screen Security Feature Bypass Vulnerability |
CVE-2023-28269 | Medium | 6.2 | 2023-04-11 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2023-28268 | High | 8.1 | 2023-04-11 | Netlogon RPC Elevation of Privilege Vulnerability |
CVE-2023-28267 | Medium | 6.5 | 2023-04-11 | Remote Desktop Protocol Client Information Disclosure Vulnerability |
CVE-2023-28266 | Medium | 5.5 | 2023-04-11 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2023-28263 | Medium | 5.5 | 2023-04-11 | Visual Studio Information Disclosure Vulnerability |
CVE-2023-28262 | High | 7.8 | 2023-04-11 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-28260 | High | 7.8 | 2023-04-11 | .NET DLL Hijacking Remote Code Execution Vulnerability |
CVE-2023-28256 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28255 | Medium | 6.6 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28254 | High | 7.2 | 2023-04-11 | Windows DNS Server Remote Code Execution Vulnerability |
CVE-2023-28253 | Medium | 5.5 | 2023-04-11 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-28252 | High | 7.8 | 2023-04-11 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-28250 | Critical | 9.8 | 2023-04-11 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-28249 | Medium | 6.2 | 2023-04-11 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2023-28248 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28247 | High | 7.5 | 2023-04-11 | Windows Network File System Information Disclosure Vulnerability |
CVE-2023-28246 | High | 7.8 | 2023-04-11 | Windows Registry Elevation of Privilege Vulnerability |
CVE-2023-28244 | High | 8.1 | 2023-04-11 | Windows Kerberos Elevation of Privilege Vulnerability |
CVE-2023-28243 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-28241 | High | 7.5 | 2023-04-11 | Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability |
CVE-2023-28240 | High | 8.8 | 2023-04-11 | Windows Network Load Balancing Remote Code Execution Vulnerability |
CVE-2023-28238 | High | 7.5 | 2023-04-11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2023-28237 | High | 7.8 | 2023-04-11 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2023-28236 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28235 | Medium | 6.8 | 2023-04-11 | Windows Lock Screen Security Feature Bypass Vulnerability |
CVE-2023-28234 | High | 7.5 | 2023-04-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-28233 | High | 7.5 | 2023-04-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-28232 | High | 7.5 | 2023-04-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28231 | High | 8.8 | 2023-04-11 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2023-28229 | High | 7.0 | 2023-04-11 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2023-28228 | Medium | 5.5 | 2023-04-11 | Windows Spoofing Vulnerability |
CVE-2023-28227 | High | 7.5 | 2023-04-11 | Windows Bluetooth Driver Remote Code Execution Vulnerability |
CVE-2023-28226 | Medium | 5.3 | 2023-04-11 | Windows Enroll Engine Security Feature Bypass Vulnerability |
CVE-2023-28225 | High | 7.8 | 2023-04-11 | Windows NTLM Elevation of Privilege Vulnerability |
CVE-2023-28224 | High | 7.1 | 2023-04-11 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-28223 | Medium | 6.6 | 2023-04-11 | Windows Domain Name Service Remote Code Execution Vulnerability |
CVE-2023-28222 | High | 7.1 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28221 | High | 7.0 | 2023-04-11 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-28220 | High | 8.1 | 2023-04-11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28219 | High | 8.1 | 2023-04-11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28218 | High | 7.0 | 2023-04-11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2023-28217 | High | 7.5 | 2023-04-11 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2023-28216 | High | 7.0 | 2023-04-11 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2023-24935 | Medium | 6.1 | 2023-04-11 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-24931 | High | 7.5 | 2023-04-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-24929 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24928 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24927 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24926 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24925 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24924 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24914 | High | 7.0 | 2023-04-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-24912 | High | 7.8 | 2023-04-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-24893 | High | 7.8 | 2023-04-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2023-24887 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24886 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24885 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24884 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24883 | Medium | 6.5 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24860 | High | 7.5 | 2023-04-11 | Microsoft Defender Denial of Service Vulnerability |
CVE-2023-23384 | High | 7.3 | 2023-04-11 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-23375 | High | 7.8 | 2023-04-11 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability |
CVE-2023-21769 | High | 7.5 | 2023-04-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-21729 | Medium | 4.3 | 2023-04-11 | Remote Procedure Call Runtime Information Disclosure Vulnerability |
CVE-2023-21727 | High | 8.8 | 2023-04-11 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-21554 | Critical | 9.8 | 2023-04-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-22282 | High | 7.3 | 2023-04-11 | WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if… |
CVE-2023-27497 | Critical | 10.0 | 2023-04-11 | Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute… |
CVE-2022-38604 | High | 7.3 | 2023-04-11 | Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability. |
CVE-2023-0977 | Medium | 6.7 | 2023-04-03 | A heap-based overflow vulnerability in Trellix Agent (Windows and Linux) version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsv… |
CVE-2023-0975 | High | 8.2 | 2023-04-03 | A vulnerability exists in Trellix Agent for Windows version 5.7.8 and earlier, that allows local users, during install/upgrade workflow, to replace one of the… |
CVE-2023-26283 | Medium | 5.4 | 2023-04-02 | IBM WebSphere Application Server 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI th… |
CVE-2023-0195 | Low | 2.0 | 2023-04-01 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hyp… |
CVE-2023-0194 | Low | 2.0 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to de… |
CVE-2023-0191 | High | 7.1 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds access may lead to denial of… |
CVE-2023-0188 | Medium | 5.5 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restri… |
CVE-2023-0187 | Medium | 6.1 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of se… |
CVE-2023-0186 | Medium | 6.1 | 2023-04-01 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service and data ta… |
CVE-2023-0182 | High | 7.8 | 2023-04-01 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, informatio… |
CVE-2023-0181 | High | 7.1 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, wh… |
CVE-2023-0664 | High | 7.8 | 2023-03-29 | A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via… |
CVE-2022-43641 | High | 7.8 | 2023-03-29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader 12.0.1.12430. User interaction is re… |