Microsoft

20671 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-28313 Apr 11, 21:15 MEDIUM PATCH This Month

Microsoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Microsoft Send Customer Voice Survey From Dynamics 365

NVD

CVSS 3.1

6.1

EPSS

0.7%

CVE-2023-28312 Apr 11, 21:15 MEDIUM PATCH This Month

Azure Machine Learning Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Information Disclosure Microsoft Azure Machine Learning

NVD

CVSS 3.1

6.5

EPSS

1.8%

CVE-2023-28311 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow Microsoft 365 Apps +2

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.7%

CVE-2023-28309 Apr 11, 21:15 MEDIUM PATCH This Month

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS Microsoft Dynamics 365

NVD

CVSS 3.1

5.4

EPSS

0.7%

CVE-2023-28308 Apr 11, 21:15 MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

6.6

EPSS

0.9%

CVE-2023-28307 Apr 11, 21:15 MEDIUM PATCH This Month

RCE Use After Free Memory Corruption Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

6.6

EPSS

0.9%

CVE-2023-28306 Apr 11, 21:15 MEDIUM PATCH This Month

RCE Use After Free Memory Corruption Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

6.6

EPSS

0.9%

CVE-2023-28305 Apr 11, 21:15 MEDIUM PATCH This Month

RCE Use After Free Memory Corruption Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

6.6

EPSS

0.9%

CVE-2023-28304 Apr 11, 21:15 HIGH PATCH This Week

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Odbc Ole Db

NVD

CVSS 3.1

7.8

EPSS

0.8%

CVE-2023-28302 Apr 11, 21:15 HIGH PATCH This Week

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +9

NVD

CVSS 3.1

7.5

EPSS

93.6%

CVE-2023-28301 Apr 11, 21:15 LOW PATCH Monitor

Microsoft Edge (Chromium-based) Tampering Vulnerability. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Google Microsoft Edge

NVD

CVSS 3.1

3.7

EPSS

0.9%

CVE-2023-28300 Apr 11, 21:15 HIGH PATCH This Week

Azure Service Connector Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Azure Service Connector

NVD

CVSS 3.1

7.5

EPSS

1.0%

CVE-2023-28299 Apr 11, 21:15 MEDIUM PATCH This Month

Visual Studio Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Visual Studio 2017 Visual Studio 2019 Visual Studio 2022

NVD

CVSS 3.1

5.5

EPSS

0.5%

CVE-2023-28298 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Kernel Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Microsoft Windows 10 1607 Windows 10 1809 Windows 10 21h2 +9

NVD

CVSS 3.1

5.5

EPSS

0.6%

CVE-2023-28297 Apr 11, 21:15 HIGH PATCH This Week

Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 10 1607 +9

NVD

CVSS 3.1

8.8

EPSS

1.7%

CVE-2023-28296 Apr 11, 21:15 HIGH PATCH This Week

Visual Studio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Visual Studio 2017 Visual Studio 2019 Visual Studio 2022

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-28293 Apr 11, 21:15 HIGH POC PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +10

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

2.9%

CVE-2023-28292 Apr 11, 21:15 HIGH PATCH This Week

Raw Image Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Raw Image Extension

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2023-28291 Apr 11, 21:15 HIGH PATCH This Week

Raw Image Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Raw Image Extension

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2023-28288 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft SharePoint Server Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

SSRF Microsoft Sharepoint Server Sharepoint Foundation

NVD Exploit-DB

CVSS 3.1

8.1

EPSS

6.2%

CVE-2023-28285 Apr 11, 21:15 HIGH POC PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption Microsoft 365 Apps +2

NVD Exploit-DB

CVSS 3.1

7.8

EPSS

3.0%

CVE-2023-28284 Apr 11, 21:15 MEDIUM PATCH This Month

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Google Microsoft Edge

NVD

CVSS 3.1

4.3

EPSS

0.8%

CVE-2023-28278 Apr 11, 21:15 MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

6.6

EPSS

0.9%

CVE-2023-28277 Apr 11, 21:15 MEDIUM PATCH This Month

Windows DNS Server Information Disclosure Vulnerability. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Information Disclosure Integer Overflow Microsoft Windows Server 2022

NVD

CVSS 3.1

4.9

EPSS

1.4%

CVE-2023-28276 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Group Policy Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

4.4

EPSS

0.5%

CVE-2023-28275 Apr 11, 21:15 HIGH PATCH This Week

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +12

NVD

CVSS 3.1

8.8

EPSS

1.5%

CVE-2023-28274 Apr 11, 21:15 HIGH PATCH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +5

NVD

CVSS 3.1

7.8

EPSS

6.8%

CVE-2023-28273 Apr 11, 21:15 HIGH PATCH This Week

Windows Clip Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1607 Windows 10 1809 Windows 10 22h2 +6

NVD

CVSS 3.1

7.0

EPSS

0.2%

CVE-2023-28272 Apr 11, 21:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.8

EPSS

0.5%

CVE-2023-28271 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Kernel Memory Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

5.5

EPSS

1.2%

CVE-2023-28270 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Lock Screen Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +5

NVD

CVSS 3.1

6.8

EPSS

0.5%

CVE-2023-28269 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Boot Manager Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

6.8

EPSS

0.6%

CVE-2023-28268 Apr 11, 21:15 HIGH PATCH This Week

Netlogon RPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

8.1

EPSS

1.5%

CVE-2023-28267 Apr 11, 21:15 MEDIUM PATCH This Month

Remote Desktop Protocol Client Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Microsoft Remote Desktop Client Windows 10 1507 +12

NVD

CVSS 3.1

6.5

EPSS

2.1%

CVE-2023-28266 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Common Log File System Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

5.5

EPSS

4.4%

CVE-2023-28263 Apr 11, 21:15 MEDIUM PATCH This Month

Visual Studio Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Visual Studio 2019 Visual Studio 2022

NVD

CVSS 3.1

5.5

EPSS

0.6%

CVE-2023-28262 Apr 11, 21:15 HIGH PATCH This Week

Visual Studio Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft Visual Studio 2019 Visual Studio 2022

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-28260 Apr 11, 21:15 NuGet HIGH PATCH This Week

.NET DLL Hijacking Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

RCE Microsoft Visual Studio 2022 Net

NVD

CVSS 3.1

7.8

EPSS

1.5%

CVE-2023-28256 Apr 11, 21:15 MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

6.6

EPSS

0.8%

CVE-2023-28255 Apr 11, 21:15 MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

6.6

EPSS

0.8%

CVE-2023-28254 Apr 11, 21:15 HIGH PATCH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

7.2

EPSS

1.4%

CVE-2023-28253 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

5.5

EPSS

0.6%

CVE-2023-28250 Apr 11, 21:15 CRITICAL PATCH Act Now

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

9.8

EPSS

2.0%

CVE-2023-28249 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Boot Manager Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

6.8

EPSS

0.6%

CVE-2023-28248 Apr 11, 21:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Information Disclosure Integer Overflow Microsoft Windows 10 1607 Windows 10 1809 +8

NVD

CVSS 3.1

7.8

EPSS

0.7%

CVE-2023-28247 Apr 11, 21:15 HIGH PATCH This Week

Windows Network File System Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Integer Overflow Microsoft Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

7.5

EPSS

1.6%

CVE-2023-28246 Apr 11, 21:15 HIGH PATCH This Week

Windows Registry Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Microsoft Windows 11 22h2 Windows Server 2022 Windows 11 21H2

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-28244 Apr 11, 21:15 HIGH PATCH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Microsoft Windows Server 2008 Windows Server 2012 Windows Server 2016 +2

NVD

CVSS 3.1

8.1

EPSS

2.9%

CVE-2023-28243 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Access of Resource Using Incompatible Type (Type Confusion) vulnerability could allow attackers to execute arbitrary code by exploiting type confusion in the application.

RCE Memory Corruption Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-28241 Apr 11, 21:15 HIGH PATCH This Week

Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-28240 Apr 11, 21:15 HIGH PATCH This Week

Windows Network Load Balancing Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

8.8

EPSS

0.8%

CVE-2023-28238 Apr 11, 21:15 HIGH PATCH This Week

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

7.5

EPSS

0.9%

CVE-2023-28237 Apr 11, 21:15 HIGH PATCH This Week

Windows Kernel Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

RCE Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

7.8

EPSS

0.6%

CVE-2023-28236 Apr 11, 21:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

7.8

EPSS

0.3%

CVE-2023-28235 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Lock Screen Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft Windows 10 1809 Windows 10 21h2 Windows 10 22h2 +2

NVD

CVSS 3.1

6.8

EPSS

0.5%

CVE-2023-28234 Apr 11, 21:15 HIGH PATCH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 11 22h2 Windows Server 2022 Windows 11 21H2

NVD

CVSS 3.1

7.5

EPSS

1.7%

CVE-2023-28233 Apr 11, 21:15 HIGH PATCH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 11 22h2 Windows Server 2022 Windows 11 21H2

NVD

CVSS 3.1

7.5

EPSS

1.7%

CVE-2023-28232 Apr 11, 21:15 HIGH PATCH This Week

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Race Condition Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.5

EPSS

0.9%

CVE-2023-28231 Apr 11, 21:15 HIGH POC PATCH THREAT This Week

DHCP Server Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow Microsoft Windows Server 2008 +4

NVD

CVSS 3.1

8.8

EPSS

36.9%

CVE-2023-28228 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Jwt Attack Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

5.5

EPSS

0.5%

CVE-2023-28227 Apr 11, 21:15 HIGH PATCH This Week

Windows Bluetooth Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +12

NVD

CVSS 3.1

7.5

EPSS

6.6%

CVE-2023-28226 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Enroll Engine Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft Jwt Attack Windows 10 1507 Windows 10 1607 +6

NVD

CVSS 3.1

5.3

EPSS

0.7%

CVE-2023-28225 Apr 11, 21:15 HIGH PATCH This Week

Windows NTLM Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +9

NVD

CVSS 3.1

7.8

EPSS

0.4%

CVE-2023-28224 Apr 11, 21:15 HIGH PATCH This Week

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

7.1

EPSS

0.4%

CVE-2023-28223 Apr 11, 21:15 MEDIUM PATCH This Month

Windows Domain Name Service Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Windows Server 2008 +3

NVD

CVSS 3.1

6.6

EPSS

1.1%

CVE-2023-28222 Apr 11, 21:15 HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

7.1

EPSS

0.7%

CVE-2023-28221 Apr 11, 21:15 HIGH PATCH This Week

Windows Error Reporting Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +8

NVD

CVSS 3.1

7.0

EPSS

0.5%

CVE-2023-28220 Apr 11, 21:15 HIGH PATCH This Week

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

8.1

EPSS

15.0%

CVE-2023-28219 Apr 11, 21:15 HIGH PATCH This Week

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

8.1

EPSS

15.0%

CVE-2023-28218 Apr 11, 21:15 HIGH PATCH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.0

EPSS

12.3%

CVE-2023-28217 Apr 11, 21:15 HIGH PATCH This Week

Windows Network Address Translation (NAT) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

7.5

EPSS

1.9%

CVE-2023-28216 Apr 11, 21:15 HIGH PATCH This Week

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +10

NVD

CVSS 3.1

7.0

EPSS

0.4%

CVE-2023-24935 Apr 11, 21:15 MEDIUM PATCH This Month

Microsoft Edge (Chromium-based) Spoofing Vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Open Redirect vulnerability could allow attackers to redirect users to malicious websites via URL manipulation.

Google Open Redirect Microsoft Edge Chromium

NVD

CVSS 3.1

6.1

EPSS

1.0%

CVE-2023-24931 Apr 11, 21:15 HIGH PATCH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Denial Of Service Information Disclosure Microsoft Windows 10 1507 +12

NVD

CVSS 3.1

7.5

EPSS

2.0%

CVE-2023-24929 Apr 11, 21:15 HIGH PATCH This Week

RCE Memory Corruption Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24928 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +11

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24927 Apr 11, 21:15 HIGH PATCH This Week

RCE Memory Corruption Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24926 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Windows 10 1507 +11

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24925 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption Microsoft Windows 10 1507 +11

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24924 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure Microsoft Windows 10 1507 +11

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24914 Apr 11, 21:15 HIGH PATCH This Week

Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0). This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

Information Disclosure Use After Free Memory Corruption Microsoft Windows 11 22h2

NVD

CVSS 3.1

7.0

EPSS

0.3%

CVE-2023-24912 Apr 11, 21:15 HIGH PATCH This Week

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

7.8

EPSS

3.6%

CVE-2023-24893 Apr 11, 21:15 HIGH PATCH This Week

Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Visual Studio Code

NVD

CVSS 3.1

7.8

EPSS

1.1%

CVE-2023-24887 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Integer Overflow Microsoft Windows 10 1507 Windows 10 1607 +11

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24886 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24885 Apr 11, 21:15 HIGH PATCH This Week

RCE Memory Corruption Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24884 Apr 11, 21:15 HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 1507 Windows 10 1607 Windows 10 1809 +9

NVD

CVSS 3.1

8.8

EPSS

1.6%

CVE-2023-24883 Apr 11, 21:15 MEDIUM PATCH This Month

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Buffer Overflow Information Disclosure Microsoft Windows 10 1507 Windows 10 1607 +10

NVD

CVSS 3.1

6.5

EPSS

1.5%

CVE-2023-24860 Apr 11, 21:15 HIGH PATCH This Week

Microsoft Defender Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Microsoft Malware Protection Engine

NVD

CVSS 3.1

7.5

EPSS

3.0%

CVE-2023-23384 Apr 11, 21:15 HIGH PATCH This Week

Microsoft SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow Microsoft Sql Server

NVD

CVSS 3.1

7.3

EPSS

0.9%

CVE-2023-28313

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

XSS Microsoft Send Customer Voice Survey From Dynamics 365

NVD

CVE-2023-28312

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Azure Machine Learning Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Information Disclosure Microsoft +1

NVD

CVE-2023-28311

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Word Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow +4

NVD Exploit-DB

CVE-2023-28309

EPSS 1% CVSS 5.4

MEDIUM PATCH This Month

XSS Microsoft Dynamics 365

NVD

CVE-2023-28308

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +6

NVD

CVE-2023-28307

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +6

NVD

CVE-2023-28306

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +6

NVD

CVE-2023-28305

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +6

NVD

CVE-2023-28304

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Microsoft ODBC and OLE DB Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Odbc +1

NVD

CVE-2023-28302

EPSS 94% CVSS 7.5

HIGH PATCH This Week

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 10 1607 +11

NVD

CVE-2023-28301

EPSS 1% CVSS 3.7

LOW PATCH Monitor

Microsoft Edge (Chromium-based) Tampering Vulnerability. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Google Microsoft +1

NVD

CVE-2023-28300

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Azure Service Connector Security Feature Bypass Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

Authentication Bypass Microsoft Azure Service Connector

NVD

CVE-2023-28299

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Visual Studio Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Visual Studio 2017 +2

NVD

CVE-2023-28298

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Kernel Denial of Service Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Denial Of Service Microsoft Windows 10 1607 +11

NVD

CVE-2023-28297

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Information Disclosure Use After Free Memory Corruption +11

NVD

CVE-2023-28296

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Visual Studio Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Visual Studio 2017 +2

NVD

CVE-2023-28293

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available.

Information Disclosure Integer Overflow Microsoft +12

NVD Exploit-DB

CVE-2023-28292

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Raw Image Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +2

NVD

CVE-2023-28291

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Raw Image Extension Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Raw Image Extension

NVD

CVE-2023-28288

EPSS 6% CVSS 8.1

HIGH POC PATCH This Week

Microsoft SharePoint Server Spoofing Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

SSRF Microsoft Sharepoint Server +1

NVD Exploit-DB

CVE-2023-28285

EPSS 3% CVSS 7.8

HIGH POC PATCH This Week

Microsoft Office Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Use After Free Memory Corruption +4

NVD Exploit-DB

CVE-2023-28284

EPSS 1% CVSS 4.3

MEDIUM PATCH This Month

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Google Microsoft +1

NVD

CVE-2023-28278

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2008 +4

NVD

CVE-2023-28277

EPSS 1% CVSS 4.9

MEDIUM PATCH This Month

Information Disclosure Integer Overflow Microsoft +1

NVD

CVE-2023-28276

EPSS 0% CVSS 4.4

MEDIUM PATCH This Month

Windows Group Policy Security Feature Bypass Vulnerability. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity.

Authentication Bypass Microsoft Windows 10 1507 +12

NVD

CVE-2023-28275

EPSS 1% CVSS 8.8

HIGH PATCH This Week

RCE Buffer Overflow Heap Overflow +14

NVD

CVE-2023-28274

EPSS 7% CVSS 7.8

HIGH PATCH This Week

Windows Win32k Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1809 +7

NVD

CVE-2023-28273

EPSS 0% CVSS 7.0

HIGH PATCH This Week

Windows Clip Service Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1607 +8

NVD

CVE-2023-28272

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Integer Overflow Microsoft +13

NVD

CVE-2023-28271

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Information Disclosure Microsoft Windows 10 1507 +12

NVD

CVE-2023-28270

EPSS 0% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Microsoft Windows 10 1809 +7

NVD

CVE-2023-28269

EPSS 1% CVSS 6.8

MEDIUM PATCH This Month

Windows Boot Manager Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Buffer Overflow Heap Overflow Microsoft +12

NVD

CVE-2023-28268

EPSS 1% CVSS 8.1

HIGH PATCH This Week

Netlogon RPC Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Microsoft Windows Server 2008 +4

NVD

CVE-2023-28267

EPSS 2% CVSS 6.5

MEDIUM PATCH This Month

Remote Desktop Protocol Client Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Microsoft +14

NVD

CVE-2023-28266

EPSS 4% CVSS 5.5

MEDIUM PATCH This Month

Windows Common Log File System Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Information Disclosure Microsoft +13

NVD

CVE-2023-28263

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Visual Studio Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Visual Studio 2019 +1

NVD

CVE-2023-28262

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Visual Studio Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft +2

NVD

CVE-2023-28260 NuGet

EPSS 2% CVSS 7.8

HIGH PATCH This Week

.NET DLL Hijacking Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

RCE Microsoft Visual Studio 2022 +1

NVD

CVE-2023-28256

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2008 +4

NVD

CVE-2023-28255

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

Windows DNS Server Remote Code Execution Vulnerability. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable.

RCE Microsoft Windows Server 2008 +4

NVD

CVE-2023-28254

EPSS 1% CVSS 7.2

HIGH PATCH This Week

Windows DNS Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

RCE Buffer Overflow Heap Overflow +6

NVD

CVE-2023-28253

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Windows Kernel Information Disclosure Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 +12

NVD

CVE-2023-28250

EPSS 2% CVSS 9.8

CRITICAL PATCH Act Now

RCE Integer Overflow Microsoft +13

NVD

CVE-2023-28249

EPSS 1% CVSS 6.8

MEDIUM PATCH This Month

Authentication Bypass Microsoft Windows 10 1507 +11

NVD

CVE-2023-28248

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Information Disclosure Integer Overflow Microsoft +10

NVD

CVE-2023-28247

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Network File System Information Disclosure Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Integer Overflow Microsoft +4

NVD

CVE-2023-28246

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Windows Registry Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Authentication Bypass Microsoft Windows 11 22h2 +2

NVD

CVE-2023-28244

EPSS 3% CVSS 8.1

HIGH PATCH This Week

Windows Kerberos Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Information Disclosure Microsoft Windows Server 2008 +4

NVD

CVE-2023-28243

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Memory Corruption Microsoft +12

NVD

CVE-2023-28241

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Microsoft Windows 10 1507 +12

NVD

CVE-2023-28240

EPSS 1% CVSS 8.8

HIGH PATCH This Week

Windows Network Load Balancing Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +6

NVD

CVE-2023-28238

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable.

RCE Microsoft Windows 10 1507 +12

NVD

CVE-2023-28237

EPSS 1% CVSS 7.8

HIGH PATCH This Week

RCE Integer Overflow Microsoft +12

NVD

CVE-2023-28236

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 +11

NVD

CVE-2023-28235

EPSS 1% CVSS 6.8

MEDIUM PATCH This Month

Windows Lock Screen Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Microsoft Windows 10 1809 +4

NVD

CVE-2023-28234

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 11 22h2 +2

NVD

CVE-2023-28233

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Windows Secure Channel Denial of Service Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Denial Of Service Microsoft Windows 11 22h2 +2

NVD

CVE-2023-28232

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required.

RCE Race Condition Microsoft +13

NVD

CVE-2023-28231

EPSS 37% CVSS 8.8

HIGH POC PATCH THREAT This Week

DHCP Server Service Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

RCE Buffer Overflow Heap Overflow +6

NVD

CVE-2023-28228

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

Windows Spoofing Vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity.

Information Disclosure Microsoft Jwt Attack +13

NVD

CVE-2023-28227

EPSS 7% CVSS 7.5

HIGH PATCH This Week

Windows Bluetooth Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 7.5), this vulnerability is no authentication required.

RCE Buffer Overflow Heap Overflow +14

NVD

CVE-2023-28226

EPSS 1% CVSS 5.3

MEDIUM PATCH This Month

Windows Enroll Engine Security Feature Bypass Vulnerability. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Microsoft Jwt Attack +8

NVD

CVE-2023-28225

EPSS 0% CVSS 7.8

HIGH PATCH This Week

Windows NTLM Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft +11

NVD

CVE-2023-28224

EPSS 0% CVSS 7.1

HIGH PATCH This Week

Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is no authentication required.

RCE Microsoft Windows 10 1507 +11

NVD

CVE-2023-28223

EPSS 1% CVSS 6.6

MEDIUM PATCH This Month

RCE Use After Free Memory Corruption +5

NVD

CVE-2023-28222

EPSS 1% CVSS 7.1

HIGH PATCH This Week

Windows Kernel Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

Information Disclosure Microsoft Windows 10 1507 +12

NVD

CVE-2023-28221

EPSS 0% CVSS 7.0

HIGH PATCH This Week

Information Disclosure Microsoft Windows 10 1507 +10

NVD

CVE-2023-28220

EPSS 15% CVSS 8.1

HIGH PATCH This Week

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 1507 +12

NVD

CVE-2023-28219

EPSS 15% CVSS 8.1

HIGH PATCH This Week

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

RCE Microsoft Windows 10 1507 +12

NVD

CVE-2023-28218

EPSS 12% CVSS 7.0

HIGH PATCH This Week

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Buffer Overflow Heap Overflow Microsoft +13

NVD

CVE-2023-28217

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Microsoft Windows 10 1507 +12

NVD

CVE-2023-28216

EPSS 0% CVSS 7.0

HIGH PATCH This Week

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.0).

Information Disclosure Microsoft Windows 10 1507 +12

NVD

CVE-2023-24935

EPSS 1% CVSS 6.1

MEDIUM PATCH This Month

Google Open Redirect Microsoft +1

NVD

CVE-2023-24931

EPSS 2% CVSS 7.5

HIGH PATCH This Week

Buffer Overflow Denial Of Service Information Disclosure +14

NVD

CVE-2023-24929

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Memory Corruption Microsoft +12

NVD

CVE-2023-24928

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Buffer Overflow Heap Overflow +13

NVD

CVE-2023-24927

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Memory Corruption Microsoft +12

NVD

CVE-2023-24926

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Buffer Overflow Heap Overflow +13

NVD

CVE-2023-24925

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use After Free vulnerability could allow attackers to access freed memory to execute arbitrary code or crash the application.

RCE Use After Free Memory Corruption +13

NVD

CVE-2023-24924

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

RCE Buffer Overflow Information Disclosure +13

NVD

CVE-2023-24914

EPSS 0% CVSS 7.0

HIGH PATCH This Week

Information Disclosure Use After Free Memory Corruption +2

NVD

CVE-2023-24912

EPSS 4% CVSS 7.8

HIGH PATCH This Week

Windows Graphics Component Elevation of Privilege Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

Buffer Overflow Heap Overflow Microsoft +13

NVD

CVE-2023-24893

EPSS 1% CVSS 7.8

HIGH PATCH This Week

Visual Studio Code Remote Code Execution Vulnerability. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

RCE Microsoft Visual Studio Code

NVD

CVE-2023-24887

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Integer Overflow Microsoft +13

NVD

CVE-2023-24886

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. This Use of Uninitialized Resource vulnerability could allow attackers to access uninitialized memory causing crashes or information disclosure.

RCE Microsoft Windows 10 1507 +11

NVD

CVE-2023-24885

EPSS 2% CVSS 8.8

HIGH PATCH This Week

RCE Memory Corruption Microsoft +12

NVD

CVE-2023-24884

EPSS 2% CVSS 8.8

HIGH PATCH This Week

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

RCE Microsoft Windows 10 1507 +11

NVD

CVE-2023-24883

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Buffer Overflow Information Disclosure Microsoft +12

NVD

CVE-2023-24860

EPSS 3% CVSS 7.5

HIGH PATCH This Week

Denial Of Service Microsoft Malware Protection Engine

NVD

CVE-2023-23384

EPSS 1% CVSS 7.3

HIGH PATCH This Week

Microsoft SQL Server Remote Code Execution Vulnerability. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Buffer Overflow Heap Overflow +2

NVD

Prev Page 102 of 230 Next