2023-01-10 - CVE Archive

CVE-2023-21755 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +14

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21754 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21749 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-21748 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-21747 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +14

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-21746 Jan 10, 22:15 HIGH This Week

Windows NTLM Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7

NVD

CVSS 3.1

7.8

EPSS

2.5%

CVE-2023-21738 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21737 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +3

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21736 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Microsoft 365 Apps Office Office Long Term Servicing Channel +1

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21735 Jan 10, 22:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-21734 Jan 10, 22:15 HIGH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD

CVSS 3.1

7.8

EPSS

0.9%

CVE-2023-21730 Jan 10, 22:15 HIGH This Week

Microsoft Cryptographic Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21726 Jan 10, 22:15 HIGH This Week

Windows Credential Manager User Interface Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21724 Jan 10, 22:15 HIGH This Week

Microsoft DWM Core Library Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 21h2 +5

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21680 Jan 10, 22:15 HIGH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +14

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21678 Jan 10, 22:15 HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2023-21675 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Memory Corruption Microsoft Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-21561 Jan 10, 22:15 HIGH This Week

Microsoft Cryptographic Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-21558 Jan 10, 22:15 HIGH This Week

Windows Error Reporting Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2012 Windows Server 2016 Windows Server 2019 +5

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21552 Jan 10, 22:15 HIGH This Week

Windows GDI Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +14

NVD

CVSS 3.1

7.8

EPSS

3.5%

CVE-2023-21551 Jan 10, 22:15 HIGH This Week

Microsoft Cryptographic Services Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1809 +7

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-21541 Jan 10, 22:15 HIGH This Week

Windows Task Scheduler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2023-21537 Jan 10, 22:15 HIGH This Week

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-21524 Jan 10, 22:15 HIGH This Week

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +9

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-21761 Jan 10, 22:15 HIGH This Week

Microsoft Exchange Server Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure SSRF Microsoft Exchange Server

NVD

CVSS 3.1

7.5

EPSS

1.6%

CVE-2023-21758 Jan 10, 22:15 HIGH This Week

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft Windows Server 2016 Windows Server 2019 +3

NVD

CVSS 3.1

7.5

EPSS

91.6%

CVE-2023-21757 Jan 10, 22:15 HIGH This Week

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft Windows Server 2008 Windows Server 2012 +8

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-21728 Jan 10, 22:15 HIGH This Week

Windows Netlogon Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-21683 Jan 10, 22:15 HIGH This Week

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft Windows 10 1607 Windows 10 1809 +11

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-21677 Jan 10, 22:15 HIGH This Week

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +8

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-21557 Jan 10, 22:15 HIGH This Week

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-21547 Jan 10, 22:15 HIGH This Week

Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Null Pointer Dereference Microsoft Windows 10 1607 Windows 10 1809 +7

NVD

CVSS 3.1

7.5

EPSS

88.2%

CVE-2023-21539 Jan 10, 22:15 HIGH This Week

Windows Authentication Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

RCE Buffer Overflow Information Disclosure Microsoft Windows 10 21h2 +5

NVD

CVSS 3.1

7.5

EPSS

1.2%

CVE-2023-21538 Jan 10, 22:15 HIGH PATCH This Week

.NET Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Deserialization Microsoft Fedora Powershell +2

NVD

CVSS 3.1

7.5

EPSS

2.7%

CVE-2023-21527 Jan 10, 22:15 HIGH This Week

Windows iSCSI Service Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +13

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-22320 Jan 10, 04:15 HIGH This Week

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Openam

NVD GitHub

CVSS 3.1

7.5

EPSS

0.7%

CVE-2023-21760 Jan 10, 22:15 HIGH This Week

Windows Print Spooler Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +7

NVD

CVSS 3.1

7.1

EPSS

0.5%

CVE-2023-21750 Jan 10, 22:15 HIGH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.

Authentication Bypass Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +12

NVD

CVSS 3.1

7.1

EPSS

0.7%

CVE-2023-21741 Jan 10, 22:15 HIGH This Week

Microsoft Office Visio Information Disclosure Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Microsoft 365 Apps Office +2

NVD

CVSS 3.1

7.1

EPSS

1.8%

CVE-2023-21771 Jan 10, 22:15 HIGH This Week

Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows Server 2022 Windows 10 Windows 11

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2023-21739 Jan 10, 22:15 HIGH PATCH This Week

Windows Bluetooth Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +7

NVD

CVSS 3.1

7.0

EPSS

0.6%

CVE-2023-21733 Jan 10, 22:15 HIGH This Week

Windows Bind Filter Driver Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Buffer Overflow Heap Overflow Microsoft Windows 10 21h2 Windows 10 22h2 +4

NVD

CVSS 3.1

7.0

EPSS

0.3%

CVE-2023-21542 Jan 10, 22:15 HIGH This Week

Windows Installer Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Microsoft Windows 10 1607 Windows Server 2008 Windows Server 2012 +6

NVD

CVSS 3.1

7.0

EPSS

0.3%

CVE-2023-21532 Jan 10, 22:15 HIGH This Week

Windows GDI Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +14

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2023-21531 Jan 10, 22:15 HIGH This Week

Azure Service Fabric Container Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). No vendor patch available.

Authentication Bypass Microsoft Azure Service Fabric

NVD

CVSS 3.1

7.0

EPSS

0.7%