Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-37304 1Microsoft 1Nugetgallery Jun 17, 2026 Jun 12, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from...Show more NuGet Gallery is a package repository that powers nuget.org. The NuGetGallery has a security vulnerability related to its handling of autolinks in Markdown content. While the platform properly filters out JavaScript from standard links, it does not adequately sanitize autolinks. This oversight allows attackers to exploit autolinks as a vector for Cross-Site Scripting (XSS) attacks. When a user inputs a Markdown autolink such as `<javascript:alert(1)>`, the link is rendered without proper sanitization. This means that the JavaScript code within the autolink can be executed by the browser, leading to an XSS attack. Version 2024.05.28 contains a patch for this issue.Show less
CVE-2024-37325 1Microsoft 1Azure Data Science Virtual Machine Jul 20, 2026 Jun 11, 2024 N/A· v4 8.1 HIGH· v3 N/A· v2 Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability
CVE-2024-35265 1Microsoft 7Windows 10 1809 Windows 10 21h2Windows 10 22h2+4 more Jul 20, 2026 Jun 11, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Perception Service Elevation of Privilege Vulnerability
CVE-2024-35263 1Microsoft 1Dynamics 365 Jul 20, 2026 Jun 11, 2024 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2024-35255 1Microsoft 2Authentication Library Azure Identity Sdk Jul 20, 2026 Jun 11, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
CVE-2024-35254 1Microsoft 1Azure Monitor Agent Jul 20, 2026 Jun 11, 2024 N/A· v4 7.1 HIGH· v3 N/A· v2 Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2024-35253 1Microsoft 1Azure File Sync Jul 20, 2026 Jun 11, 2024 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Microsoft Azure File Sync Elevation of Privilege Vulnerability
CVE-2024-35252 1Microsoft 1Azure Storage Data Movement Library Jul 20, 2026 Jun 11, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Azure Storage Movement Client Library Denial of Service Vulnerability
CVE-2024-35250 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jul 20, 2026 Jun 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
CVE-2024-35249 1Microsoft 1Dynamics 365 Business Central Jul 20, 2026 Jun 11, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability
CVE-2024-35248 1Microsoft 1Dynamics 365 Business Central Jul 21, 2026 Jun 11, 2024 N/A· v4 7.3 HIGH· v3 N/A· v2 Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2024-30104 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jul 20, 2026 Jun 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30103 1Microsoft 4365 Apps OfficeOffice Long Term Servicing Channel+1 more Jul 20, 2026 Jun 11, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Outlook Remote Code Execution Vulnerability
CVE-2024-30102 1Microsoft 1365 Apps Jun 17, 2026 Jun 11, 2024 N/A· v4 7.3 HIGH· v3 N/A· v2 Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30101 1Microsoft 3365 Apps OfficeOffice Long Term Servicing Channel Jul 20, 2026 Jun 11, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Office Remote Code Execution Vulnerability
CVE-2024-30100 1Microsoft 1Sharepoint Server Jun 17, 2026 Jun 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2024-30099 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jul 20, 2026 Jun 11, 2024 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2024-30097 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jul 20, 2026 Jun 11, 2024 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability
CVE-2024-30096 1Microsoft 9Windows 10 1809 Windows 10 21h2Windows 10 22h2+6 more Jul 20, 2026 Jun 11, 2024 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2024-30095 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jul 20, 2026 Jun 11, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Previous 1...167168169...748 Next