cve.bz

microsoft vulnerabilities, newest first, page 120

Filter
  1. 7.2CVE-2024-38228EPSS 4.2%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  2. 7.2CVE-2024-38227EPSS 8.2%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  3. 7.3CVE-2024-38226KEVEPSS 2.7%

    Microsoft Publisher Security Feature Bypass Vulnerability

  4. 9.8CVE-2024-38225EPSS 1.4%

    Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

  5. 9.0CVE-2024-38220EPSS 1.0%

    Azure Stack Hub Elevation of Privilege Vulnerability

  6. 5.4CVE-2024-38217KEVEPSS 10%

    Windows Mark of the Web Security Feature Bypass Vulnerability

  7. 9.0CVE-2024-38216EPSS 0.9%

    Azure Stack Hub Elevation of Privilege Vulnerability

  8. 9.9CVE-2024-38194EPSS 1.3%

    An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

  9. 7.1CVE-2024-38188EPSS 0.6%

    Azure Network Watcher VM Agent Elevation of Privilege Vulnerability

  10. 7.5CVE-2024-38119EPSS 0.8%

    Windows Network Address Translation (NAT) Remote Code Execution Vulnerability

  11. 7.8CVE-2024-38046EPSS 0.7%

    PowerShell Elevation of Privilege Vulnerability

  12. 8.1CVE-2024-38045EPSS 1.4%

    Windows TCP/IP Remote Code Execution Vulnerability

  13. 8.8CVE-2024-38018EPSS 51%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  14. 7.8CVE-2024-38014KEVEPSS 6.3%

    Windows Installer Elevation of Privilege Vulnerability

  15. 9.8CVE-2024-37980EPSS 1.4%

    Microsoft SQL Server Elevation of Privilege Vulnerability

  16. 7.1CVE-2024-37966EPSS 2.2%

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

  17. 8.8CVE-2024-37965EPSS 1.7%

    Microsoft SQL Server Elevation of Privilege Vulnerability

  18. 4.3CVE-2024-37342EPSS 1.7%

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

  19. 9.8CVE-2024-37341EPSS 1.4%

    Microsoft SQL Server Elevation of Privilege Vulnerability

  20. 8.8CVE-2024-37340EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  21. 8.8CVE-2024-37339EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  22. 8.8CVE-2024-37338EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  23. 4.3CVE-2024-37337EPSS 1.7%

    Microsoft SQL Server Native Scoring Information Disclosure Vulnerability

  24. 8.8CVE-2024-37335EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  25. 7.8CVE-2024-30073EPSS 0.9%

    Windows Security Zone Mapping Security Feature Bypass Vulnerability

  26. 8.8CVE-2024-26191EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  27. 8.8CVE-2024-26186EPSS 1.6%

    Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

  28. 9.8CVE-2024-21416EPSS 1.4%

    Windows TCP/IP Remote Code Execution Vulnerability

  29. 7.8CVE-2024-41879EPSS 0.5%

    Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction …

  30. 6.3CVE-2024-38207EPSS 0.4%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  31. 7.5CVE-2024-43477EPSS 1.0%

    Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Verifiable ID's on another tenant.

  32. 7.8CVE-2024-38210EPSS 0.7%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  33. 7.8CVE-2024-38209EPSS 0.7%

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

  34. 6.1CVE-2024-38208EPSS 0.4%

    Microsoft Edge for Android Spoofing Vulnerability

  35. 9.6CVE-2024-7971KEVEPSS 21%

    Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  36. 8.8CVE-2024-7965KEVEPSS 19%

    Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  37. 8.8CVE-2024-38175EPSS 0.8%

    An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network.

  38. 8.3CVE-2024-43472EPSS 0.4%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  39. 7.8CVE-2024-38163EPSS 0.7%

    Windows Update Stack Elevation of Privilege Vulnerability

  40. 6.8CVE-2024-38223EPSS 0.7%

    Windows Initial Machine Configuration Elevation of Privilege Vulnerability

  41. 7.8CVE-2024-38215EPSS 0.7%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  42. 6.5CVE-2024-38214EPSS 1.6%

    Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability

  43. 6.5CVE-2024-38213KEVEPSS 14%

    Windows Mark of the Web Security Feature Bypass Vulnerability

  44. 8.2CVE-2024-38211EPSS 1.0%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  45. 7.0CVE-2024-38201EPSS 0.6%

    Azure Stack Hub Elevation of Privilege Vulnerability

  46. 9.8CVE-2024-38199EPSS 2.2%

    Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability

  47. 7.5CVE-2024-38198EPSS 0.8%

    Windows Print Spooler Elevation of Privilege Vulnerability

  48. 6.5CVE-2024-38197EPSS 17%

    Microsoft Teams for iOS Spoofing Vulnerability

  49. 7.8CVE-2024-38196EPSS 6.0%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  50. 7.8CVE-2024-38195EPSS 0.5%

    Azure CycleCloud Remote Code Execution Vulnerability