Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-33104 State: PUBLISHED Published: 2024-03-04T10:48:43.703Z Last Updated: 2024-08-29T18:23:54.358Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-20 Description: Transient DOS while processing PDU Release command with a parameter PDU ID out of range. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-33105 State: PUBLISHED Published: 2024-03-04T10:48:45.127Z Last Updated: 2024-08-26T20:48:58.369Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-16 Description: Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/march-2024-bulletin
CVE ID: CVE-2023-33106 State: PUBLISHED Published: 2023-12-05T03:04:27.889Z Last Updated: 2025-10-21T23:05:30.898Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33107 State: PUBLISHED Published: 2023-12-05T03:04:29.196Z Last Updated: 2025-10-21T23:05:30.590Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-190 Description: Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/december-2023-bulletin
CVE ID: CVE-2023-33108 State: PUBLISHED Published: 2024-01-02T05:38:40.125Z Last Updated: 2025-06-03T14:46:13.795Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33109 State: PUBLISHED Published: 2024-01-02T05:38:41.562Z Last Updated: 2025-06-16T18:35:57.084Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-476 Description: Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33110 State: PUBLISHED Published: 2024-01-02T05:38:43.225Z Last Updated: 2025-05-21T14:09:00.711Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-823 Description: The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bu
iner: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33111 State: PUBLISHED Published: 2024-04-01T15:05:56.686Z Last Updated: 2024-08-02T15:39:34.383Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-129 Description: Information disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE ID: CVE-2023-33112 State: PUBLISHED Published: 2024-01-02T05:38:44.471Z Last Updated: 2024-10-01T21:18:13.161Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33113 State: PUBLISHED Published: 2024-01-02T05:38:45.672Z Last Updated: 2025-06-17T19:55:25.376Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-120 Description: Memory corruption when resource manager sends the host kernel a reply message with multiple fragments. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33114 State: PUBLISHED Published: 2024-01-02T05:38:46.886Z Last Updated: 2024-11-14T19:23:48.673Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33115 State: PUBLISHED Published: 2024-04-01T15:05:57.965Z Last Updated: 2024-08-23T18:52:39.896Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Memory corruption while processing buffer initialization, when trusted report for certain report types are generated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/april-2024-bulletin.html
CVE ID: CVE-2023-33116 State: PUBLISHED Published: 2024-01-02T05:38:48.059Z Last Updated: 2025-06-17T19:55:15.386Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-126 Description: Transient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33117 State: PUBLISHED Published: 2024-01-02T05:38:49.188Z Last Updated: 2025-06-18T14:53:28.329Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33118 State: PUBLISHED Published: 2024-01-02T05:38:50.464Z Last Updated: 2025-06-03T14:46:08.302Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33119 State: PUBLISHED Published: 2024-05-06T14:32:01.069Z Last Updated: 2024-08-02T15:39:34.342Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-367 Description: Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2024-bulletin.html
CVE ID: CVE-2023-33120 State: PUBLISHED Published: 2024-01-02T05:38:51.959Z Last Updated: 2025-06-03T14:46:01.965Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Qualcomm, Inc. Products: Snapdragon Problem Types: CWE-416 Description: Memory corruption in Audio when memory map command is executed consecutively in ADSP. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.qualcomm.com/company/product-security/bulletins/january-2024-bulletin
CVE ID: CVE-2023-33121 State: PUBLISHED Published: 2023-06-13T08:17:14.419Z Last Updated: 2025-01-03T01:42:09.311Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3, Teamcenter Visualization V14.0, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2 Problem Types: CWE-476 Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualiza
ation V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a null pointer dereference vulnerability while parsing specially crafted CGM files. An attacker could leverage this vulnerability to crash the application causing denial of service condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf
CVE ID: CVE-2023-33122 State: PUBLISHED Published: 2023-06-13T08:17:15.483Z Last Updated: 2025-01-03T01:40:43.732Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3, Teamcenter Visualization V14.0, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2 Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualiza
ation V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted CGM file. This vulnerability could allow an attacker to disclose sensitive information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf
CVE ID: CVE-2023-33123 State: PUBLISHED Published: 2023-06-13T08:17:16.585Z Last Updated: 2025-01-03T01:38:42.204Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3, Teamcenter Visualization V14.0, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2 Problem Types: CWE-125 Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualiz
zation V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf
CVE ID: CVE-2023-33124 State: PUBLISHED Published: 2023-06-13T08:17:17.687Z Last Updated: 2025-01-03T01:37:31.531Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: JT2Go, Teamcenter Visualization V13.2, Teamcenter Visualization V13.3, Teamcenter Visualization V14.0, Teamcenter Visualization V14.1, Teamcenter Visualization V14.2 Problem Types: CWE-119 Description: A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualiz
zation V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications contain a memory corruption vulnerability while parsing specially crafted CGM files. This could allow an attacker to execute code in the context of the current process. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-538795.pdf
CVE ID: CVE-2023-33126 State: PUBLISHED Published: 2023-06-13T23:26:22.404Z Last Updated: 2025-01-01T01:44:12.050Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, PowerShell 7.2 Problem Types: Remote Code Execution Description: .NET and Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33
P Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33126
CVE ID: CVE-2023-33127 State: PUBLISHED Published: 2023-07-11T17:03:05.826Z Last Updated: 2025-01-01T01:51:49.527Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, PowerShell 7.2, PowerShell 7.3 Problem Types: CWE-1220 Description: .NET and Visual Studio Elevation of Privilege Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33127
CVE ID: CVE-2023-33128 State: PUBLISHED Published: 2023-06-13T23:26:22.949Z Last Updated: 2025-01-01T01:44:12.674Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6, PowerShell 7.3 Problem Types: CWE-416 Description: .NET and Visual Studio Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33128
CVE ID: CVE-2023-33129 State: PUBLISHED Published: 2023-06-13T23:26:23.503Z Last Updated: 2025-02-28T20:02:42.174Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-122 Description: Microsoft SharePoint Server Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33129
CVE ID: CVE-2023-33130 State: PUBLISHED Published: 2023-06-13T23:26:24.055Z Last Updated: 2025-02-28T21:09:33.378Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-79 Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33130
CVE ID: CVE-2023-33131 State: PUBLISHED Published: 2023-06-13T23:26:24.683Z Last Updated: 2025-02-28T20:47:36.610Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC 2021, Microsoft Outlook 2016, Microsoft Outlook 2013, Microsoft Outlook 2013 Service Pack 1 Problem Types: Remote Code Execution Description: Microsoft Outlook Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33131
CVE ID: CVE-2023-33132 State: PUBLISHED Published: 2023-06-13T23:26:25.242Z Last Updated: 2025-02-28T20:02:36.049Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-79 Description: Microsoft SharePoint Server Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33132
CVE ID: CVE-2023-33133 State: PUBLISHED Published: 2023-06-13T23:26:25.793Z Last Updated: 2025-11-04T19:16:27.934Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office 2019 for Mac, Microsoft Office Online Server, Microsoft 365 Apps for Enterprise, Microsoft Office LTSC for Mac 2021, Microsoft Office LTSC 2021, Microsoft Excel 2016, Microsoft Excel 2013 Service Pack 1 Problem Types: CWE-122 Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerabil
otes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33133
CVE ID: CVE-2023-33134 State: PUBLISHED Published: 2023-07-11T17:03:06.333Z Last Updated: 2025-02-28T21:07:37.141Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition Problem Types: CWE-502 Description: Microsoft SharePoint Server Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33134
CVE ID: CVE-2023-33135 State: PUBLISHED Published: 2023-06-13T23:26:26.390Z Last Updated: 2025-01-01T01:44:15.801Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Microsoft Products: .NET 6.0, .NET 7.0, Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2022 version 17.6 Problem Types: Elevation of Privilege Description: .NET and Visual Studio Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33135
CVE ID: CVE-2023-33136 State: PUBLISHED Published: 2023-09-12T16:58:34.967Z Last Updated: 2025-10-30T18:17:40.891Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C) Vendors: Microsoft Products: Azure DevOps Server 2020.0.2, Azure DevOps Server, Azure DevOps Server 2020.1.2, Azure DevOps Server 2022.0.1, Azure DevOps Server 2019.0.1 Problem Types: CWE-77 Description: Azure DevOps Server Remote Code Execution Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33136
CVE ID: CVE-2023-33137 State: PUBLISHED Published: 2023-06-13T23:25:54.885Z Last Updated: 2025-02-28T21:10:06.257Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Office 2019, Microsoft Office Online Server, Microsoft Excel 2016, Microsoft Excel 2013 Service Pack 1 Problem Types: CWE-415 Description: Microsoft Excel Remote Code Execution Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33137
CVE ID: CVE-2023-33139 State: PUBLISHED Published: 2023-06-13T23:25:55.404Z Last Updated: 2025-01-01T01:43:39.771Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C) Vendors: Microsoft Products: Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8), Microsoft Visual Studio 2022 version 17.2, Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10), Microsoft Visual Studio 2022 version 17.0, Microsoft Visual Studio 2022 version 17.4, Microsoft Visual Studio 2013 Update 5, Microsoft Visual Studio 2015 Update 3, Microsoft Visual Studio 2022 version 17.6 Problem Types: CWE-125 Description: Visual Studio Information Disclosure Vulnerability
t Visual Studio 2022 version 17.6 Problem Types: CWE-125 Description: Visual Studio Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33139
CVE ID: CVE-2023-33140 State: PUBLISHED Published: 2023-06-13T23:26:26.972Z Last Updated: 2025-03-19T19:54:49.951Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Microsoft OneNote for Universal Problem Types: Spoofing Description: Microsoft OneNote Spoofing Vulnerability Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-33140