cve.bz

microsoft vulnerabilities, newest first, page 135

Filter
  1. 6.5CVE-2022-44684EPSS 1.5%

    Windows Local Session Manager (LSM) Denial of Service Vulnerability

  2. 4.3CVE-2023-36878EPSS 0.9%

    Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  3. 8.8CVE-2023-6702EPSS 44%

    Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  4. 6.5CVE-2023-21751EPSS 1.0%

    Azure DevOps Server Spoofing Vulnerability

  5. 7.8CVE-2023-36696EPSS 0.9%

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

  6. 7.8CVE-2023-36391EPSS 7.2%

    Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

  7. 5.4CVE-2023-36020EPSS 1.0%

    Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  8. 7.4CVE-2023-36019EPSS 16%

    Microsoft Power Platform Connector Spoofing Vulnerability

  9. 5.3CVE-2023-36012EPSS 2.0%

    DHCP Server Service Information Disclosure Vulnerability

  10. 7.8CVE-2023-36011EPSS 0.7%

    Win32k Elevation of Privilege Vulnerability

  11. 7.5CVE-2023-36010EPSS 2.7%

    Microsoft Defender Denial of Service Vulnerability

  12. 5.5CVE-2023-36009EPSS 1.2%

    Microsoft Word Information Disclosure Vulnerability

  13. 8.8CVE-2023-36006EPSS 1.9%

    Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  14. 8.1CVE-2023-36005EPSS 24%

    Windows Telephony Server Elevation of Privilege Vulnerability

  15. 7.5CVE-2023-36004EPSS 1.4%

    Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

  16. 7.3CVE-2023-36003EPSS 2.8%

    XAML Diagnostics Elevation of Privilege Vulnerability

  17. 7.8CVE-2023-35644EPSS 6.2%

    Windows Sysmain Service Elevation of Privilege Vulnerability

  18. 7.5CVE-2023-35643EPSS 2.6%

    DHCP Server Service Information Disclosure Vulnerability

  19. 6.5CVE-2023-35642EPSS 1.3%

    Internet Connection Sharing (ICS) Denial of Service Vulnerability

  20. 8.8CVE-2023-35641EPSS 7.2%

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

  21. 8.8CVE-2023-35639EPSS 2.4%

    Microsoft ODBC Driver Remote Code Execution Vulnerability

  22. 7.5CVE-2023-35638EPSS 3.3%

    DHCP Server Service Denial of Service Vulnerability

  23. 6.5CVE-2023-35636EPSS 18%

    Microsoft Outlook Information Disclosure Vulnerability

  24. 5.5CVE-2023-35635EPSS 1.0%

    Windows Kernel Denial of Service Vulnerability

  25. 8.8CVE-2023-35634EPSS 1.0%

    Windows Bluetooth Driver Remote Code Execution Vulnerability

  26. 7.8CVE-2023-35633EPSS 8.7%

    Windows Kernel Elevation of Privilege Vulnerability

  27. 7.8CVE-2023-35632EPSS 6.5%

    Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

  28. 7.8CVE-2023-35631EPSS 6.5%

    Win32k Elevation of Privilege Vulnerability

  29. 8.8CVE-2023-35630EPSS 6.1%

    Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

  30. 6.8CVE-2023-35629EPSS 0.9%

    Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability

  31. 8.1CVE-2023-35628EPSS 93%

    Windows MSHTML Platform Remote Code Execution Vulnerability

  32. 4.7CVE-2023-35625EPSS 0.7%

    Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability

  33. 7.3CVE-2023-35624EPSS 0.9%

    Azure Connected Machine Agent Elevation of Privilege Vulnerability

  34. 7.5CVE-2023-35622EPSS 1.6%

    Windows DNS Spoofing Vulnerability

  35. 7.5CVE-2023-35621EPSS 2.3%

    Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability

  36. 5.3CVE-2023-35619EPSS 1.2%

    Microsoft Outlook for Mac Spoofing Vulnerability

  37. 7.8CVE-2023-21740EPSS 1.1%

    Windows Media Remote Code Execution Vulnerability

  38. 4.3CVE-2023-38174EPSS 2.2%

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  39. 4.8CVE-2023-36880EPSS 1.6%

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  40. 9.6CVE-2023-35618EPSS 2.9%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  41. 5.3CVE-2023-49283EPSS 2.2%

    microsoft-graph-core the Microsoft Graph Library for PHP. The Microsoft Graph Beta PHP SDK published packages which contained test code that enabled the use of the phpInfo() function from any application that could access and execute the f…

  42. 5.3CVE-2023-49282EPSS 2.2%

    msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the phpInfo() function from any application that could access and execute the file at …

  43. 9.8CVE-2023-48693EPSS 1.3%

    Azure RTOS ThreadX is an advanced real-time operating system (RTOS) designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to vulnerability in parameter checking mechanism in Azure RTOS T…

  44. 9.8CVE-2023-48692EPSS 3.1%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected…

  45. 9.8CVE-2023-48691EPSS 3.1%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affe…

  46. 9.8CVE-2023-48316EPSS 4.3%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected…

  47. 9.8CVE-2023-48315EPSS 3.9%

    Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected…

  48. 9.6CVE-2023-6345KEVEPSS 16%

    Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

  49. 6.8CVE-2023-24023EPSS 1.3%

    Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the en…

  50. 6.5CVE-2023-36013EPSS 1.4%

    PowerShell Information Disclosure Vulnerability