Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-48692 1Microsoft 1Azure Rtos Netx Duo Jun 17, 2026 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NET...Show more Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to icmp, tcp, snmp, dhcp, nat and ftp in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48691 1Microsoft 1Azure Rtos Netx Duo Jun 17, 2026 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code...Show more Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-of-bounds write in Azure RTOS NETX Duo, that could lead to remote code execution. The affected components include process related to IGMP protocol in RTOS v6.2.1 and below. The fix has been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48316 1Microsoft 1Azure Rtos Netx Duo Jun 17, 2026 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NET...Show more Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to snmp, smtp, ftp and dtls in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-48315 1Microsoft 1Azure Rtos Netx Duo Jun 17, 2026 Dec 5, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NET...Show more Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow vulnerabilities in Azure RTOS NETX Duo. The affected components include processes/functions related to ftp and sntp in RTOS v6.2.1 and below. The fixes have been included in NetX Duo release 6.3.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.Show less
CVE-2023-6345 4Debian FedoraprojectGoogle+1 more 4Chrome Debian LinuxEdge Chromium+1 more Jun 17, 2026 Nov 29, 2023 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severi...Show more Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)Show less
CVE-2023-24023 2Bluetooth Microsoft 10Bluetooth Core Specification Windows 10 1809Windows 10 21h2+7 more Jun 17, 2026 Nov 28, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to...Show more Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.Show less
CVE-2023-36013 1Microsoft 1Powershell Jun 17, 2026 Nov 20, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 PowerShell Information Disclosure Vulnerability
CVE-2023-36026 1Microsoft 1Edge Chromium Jun 17, 2026 Nov 16, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-36008 1Microsoft 1Edge Chromium Jun 17, 2026 Nov 16, 2023 N/A· v4 6.6 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-36558 1Microsoft 3.net Asp.net CoreVisual Studio 2022 Jun 17, 2026 Nov 14, 2023 N/A· v4 5.5 MEDIUM· v3 N/A· v2 ASP.NET Core Security Feature Bypass Vulnerability
CVE-2023-36038 1Microsoft 2Asp.net Core Visual Studio 2022 Jun 17, 2026 Nov 14, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 ASP.NET Core Denial of Service Vulnerability
CVE-2023-36437 1Microsoft 1Azure Pipelines Agent Jun 17, 2026 Nov 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Azure DevOps Server Remote Code Execution Vulnerability
CVE-2023-36049 1Microsoft 3.net .net FrameworkVisual Studio 2022 Jun 17, 2026 Nov 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
CVE-2023-36007 1Microsoft 1Send Customer Voice Survey From Dynamics 365 Jun 17, 2026 Nov 14, 2023 N/A· v4 4.1 MEDIUM· v3 N/A· v2 Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability
CVE-2023-38177 1Microsoft 2Sharepoint Enterprise Server Sharepoint Server Jun 17, 2026 Nov 14, 2023 N/A· v4 6.8 MEDIUM· v3 N/A· v2 Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2023-38151 1Microsoft 2Host Integration Server Ole Db Provider Jun 17, 2026 Nov 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability
CVE-2023-36719 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
CVE-2023-36705 1Microsoft 14Windows 10 1507 Windows 10 1607Windows 10 1809+11 more Jun 17, 2026 Nov 14, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Installer Elevation of Privilege Vulnerability
CVE-2023-36560 1Microsoft 1.net Framework Jun 17, 2026 Nov 14, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 ASP.NET Security Feature Bypass Vulnerability
CVE-2023-36439 1Microsoft 1Exchange Server Jun 17, 2026 Nov 14, 2023 N/A· v4 8.0 HIGH· v3 N/A· v2 Microsoft Exchange Server Remote Code Execution Vulnerability

Previous 1...193194195...749 Next