Microsoft

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-24942 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-24941 1Microsoft 4Windows Server 2012 Windows Server 2016Windows Server 2019+1 more Jun 17, 2026 May 9, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Windows Network File System Remote Code Execution Vulnerability
CVE-2023-24940 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
CVE-2023-24939 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Server for NFS Denial of Service Vulnerability
CVE-2023-24932 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 May 9, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 Secure Boot Security Feature Bypass Vulnerability
CVE-2023-24905 1Microsoft 5Windows 10 20h2 Windows 10 21h2Windows 10 22h2+2 more Jun 17, 2026 May 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Remote Desktop Client Remote Code Execution Vulnerability
CVE-2023-24904 1Microsoft 1Windows Server 2008 Jun 17, 2026 May 9, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Windows Installer Elevation of Privilege Vulnerability
CVE-2023-24903 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 May 9, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
CVE-2023-24902 1Microsoft 2Windows 11 21h2 Windows 11 22h2 Jun 17, 2026 May 9, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Win32k Elevation of Privilege Vulnerability
CVE-2023-24901 1Microsoft 12Windows 10 1507 Windows 10 1607Windows 10 1809+9 more Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows NFS Portmapper Information Disclosure Vulnerability
CVE-2023-24900 1Microsoft 13Windows 10 1507 Windows 10 1607Windows 10 1809+10 more Jun 17, 2026 May 9, 2023 N/A· v4 5.9 MEDIUM· v3 N/A· v2 Windows NTLM Security Support Provider Information Disclosure Vulnerability
CVE-2023-24899 1Microsoft 3Windows 11 21h2 Windows 11 22h2Windows Server 2022 Jun 17, 2026 May 9, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Graphics Component Elevation of Privilege Vulnerability
CVE-2023-24898 1Microsoft 1Windows Server 2022 Jun 17, 2026 May 9, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Windows SMB Denial of Service Vulnerability
CVE-2023-29354 1Microsoft 1Edge Chromium Jun 17, 2026 May 5, 2023 N/A· v4 4.7 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-29350 1Microsoft 1Edge Chromium Jun 17, 2026 May 5, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-29334 1Microsoft 1Edge Chromium Jun 17, 2026 Apr 28, 2023 N/A· v4 4.3 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-28286 1Microsoft 1Edge Chromium Jun 17, 2026 Apr 27, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2023-28261 1Microsoft 1Edge Chromium Jun 17, 2026 Apr 27, 2023 N/A· v4 5.7 MEDIUM· v3 N/A· v2 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-21712 1Microsoft 15Windows 10 Windows 10 1607Windows 10 1809+12 more Jun 17, 2026 Apr 27, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
CVE-2023-30846 1Microsoft 1Typed Rest Client Jun 17, 2026 Apr 26, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties....Show more typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the typed-rest-client library version 1.7.3 or lower are vulnerable to leak authentication data to 3rd parties. The flow of the vulnerability is as follows: First, send any request with `BasicCredentialHandler`, `BearerCredentialHandler` or `PersonalAccessTokenCredentialHandler`. Second, the target host may return a redirection (3xx), with a link to a second host. Third, the next request will use the credentials to authenticate with the second host, by setting the `Authorization` header. The expected behavior is that the next request will NOT set the `Authorization` header. The problem was fixed in version 1.8.0. There are no known workarounds.Show less

Previous 1...245246247...770 Next