Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-21493 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:15:37.681Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Improper access control vulnerability in SemShareFileProvider prior to SMR May-2023 Release 1 allows local attackers to access protected data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21494 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:15:56.178Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21495 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:16:31.303Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-284 Description: Improper access control vulnerability in Knox Enrollment Service prior to SMR May-2023 Release 1 allow attacker install KSP app when device admin is set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21496 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:16:52.915Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-489 Description: Active Debug Code vulnerability in ActivityManagerService prior to SMR May-2023 Release 1 allows attacker to use debug function via setting debug level. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21497 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:18:46.833Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-134 Description: Use of externally-controlled format string vulnerability in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the memory address. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21498 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:29:22.128Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper input validation vulnerability in setPartnerTAInfo in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to overwrite the trustlet memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21499 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:29:39.011Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-787 Description: Out-of-bounds write vulnerability in TA_Communication_mpos_encrypt_pin in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21500 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:29:59.792Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-415 Description: Double free validation vulnerability in setPinPadImages in mPOS TUI trustlet prior to SMR May-2023 Release 1 allows local attackers to access the trustlet memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21501 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:40:16.874Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper input validation vulnerability in mPOS fiserve trustlet prior to SMR May-2023 Release 1 allows local attackers to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21502 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:40:32.436Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21503 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:40:47.962Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Potential buffer overflow vulnerability in mm_LteInterRatManagement.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21504 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:41:30.770Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-20 Description: Potential buffer overflow vulnerability in mm_Plmncoordination.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05
CVE ID: CVE-2023-21505 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:18:59.946Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: Samsung Mobile Products: Samsung Core Service Problem Types: CWE-285 Description: Improper access control in Samsung Core Service prior to version 2.1.00.36 allows attacker to write arbitrary file in sandbox. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21506 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:19:18.287Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Blockchain Keystore Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21507 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:19:39.050Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Blockchain Keystore Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21508 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:19:59.157Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Blockchain Keystore Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability while processing BC_TUI_CMD_SEND_RESOURCE_DATA command in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21509 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:20:21.814Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Blockchain Keystore Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21510 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:20:41.456Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Blockchain Keystore Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability while processing BC_TUI_CMD_UPDATE_SCREEN in bc_tui trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21511 State: PUBLISHED Published: 2023-05-04T00:00:00.000Z Last Updated: 2025-02-12T16:21:10.547Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Blockchain Keystore Problem Types: CWE-125 Description: Out-of-bounds Read vulnerability while processing CMD_COLDWALLET_BTC_SET_PRV_UTXO in bc_core trustlet from Samsung Blockchain Keystore prior to version 1.3.12.1 allows local attacker to read arbitrary memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=05
CVE ID: CVE-2023-21512 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-07T18:28:28.976Z Severity: LOW (CVSS 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without proper access permission. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06
CVE ID: CVE-2023-21513 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-05T15:34:18.506Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-269 Description: Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06
CVE ID: CVE-2023-21514 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T21:38:48.735Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-20 Description: Improper scheme validation from InstantPlay Deeplink in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01
CVE ID: CVE-2023-21515 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T16:08:58.896Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-20 Description: InstantPlay which included vulnerable script which could execute javascript in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01
CVE ID: CVE-2023-21516 State: PUBLISHED Published: 2023-05-26T00:00:00 Last Updated: 2025-01-15T16:09:18.756Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Galaxy Store Problem Types: CWE-20 Description: XSS vulnerability from InstantPlay in Galaxy Store prior to version 4.5.49.8 allows attackers to execute javascript API to install APK from Galaxy Store. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=01
CVE ID: CVE-2023-21517 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-12-04T21:43:05.684Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Samsung Mobile Products: Samsung Mobile Devices Problem Types: CWE-120 Description: Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=06
CVE ID: CVE-2023-21518 State: PUBLISHED Published: 2023-06-28T00:00:00 Last Updated: 2024-11-07T18:28:00.918Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: Samsung Mobile Products: Samsung SearchWidget Problem Types: CWE-284 Description: Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=06
CVE ID: CVE-2023-21520 State: PUBLISHED Published: 2023-09-12T19:45:51.105Z Last Updated: 2024-09-25T19:59:01.852Z Vendors: BlackBerry Products: AtHoc Description: A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://http://support.blackberry.com/kb/articleDetail?articleNumber=000112406
CVE ID: CVE-2023-21521 State: PUBLISHED Published: 2023-09-12T18:18:34.237Z Last Updated: 2024-09-26T13:39:44.217Z Vendors: BlackBerry Products: AtHoc Description: An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.blackberry.com/kb
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.blackberry.com/kb/articleDetail?articleNumber=000112406
CVE ID: CVE-2023-21522 State: PUBLISHED Published: 2023-09-12T18:29:24.729Z Last Updated: 2024-09-25T20:02:13.197Z Vendors: BlackBerry Products: AtHoc Description: A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially control a script that is executed in the victim's browser then they can execute script commands in the context of the affected user account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.blackberry.com/kb/articleDetail?articleNumber=000112406
CVE ID: CVE-2023-21523 State: PUBLISHED Published: 2023-09-12T19:44:02.601Z Last Updated: 2024-09-25T20:01:23.714Z Vendors: BlackBerry Products: AtHoc Description: A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.15 could allow an attacker to execute script commands in the context of the affected user account. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://http://support.blackberry.com/kb/articleDetail?articleNumber=000112406
CVE ID: CVE-2023-21524 State: PUBLISHED Published: 2023-01-10T00:00:00.000Z Last Updated: 2025-04-12T03:55:14.464Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Window
ation), Windows 8.1, Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: CWE-798 Description: Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21524
CVE ID: CVE-2023-21525 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2025-01-01T00:36:19.174Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service P
on), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Denial of Service Description: Remote Procedure Call Runtime Denial of Service Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21525
CVE ID: CVE-2023-21526 State: PUBLISHED Published: 2023-07-11T17:03:04.635Z Last Updated: 2025-01-01T01:52:41.528Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 11 version 22H2, Windows 10 Version 22H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Wi
08 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation) Problem Types: Information Disclosure Description: Windows Netlogon Information Disclosure Vulnerability Additional Analyst Notes: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21526
CVE ID: CVE-2023-21527 State: PUBLISHED Published: 2023-01-10T00:00:00 Last Updated: 2025-01-01T00:36:19.701Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C) Vendors: Microsoft Products: Windows 10 Version 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Windows Server 2022, Windows 10 Version 20H2, Windows 11 version 21H2, Windows 10 Version 21H2, Windows 10 Version 1507, Windows 10 Version 1607, Windows Server 2016, Windows Server 2016 (Server Core installation), Windows 7, Windows 7 Service Pack 1, Windows 8.1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 200
1, Windows Server 2008 Service Pack 2, Windows Server 2008 Service Pack 2 (Server Core installation), Windows Server 2008 Service Pack 2, Windows Server 2008 R2 Service Pack 1, Windows Server 2008 R2 Service Pack 1 (Server Core installation), Windows Server 2012, Windows Server 2012 (Server Core installation), Windows Server 2012 R2, Windows Server 2012 R2 (Server Core installation), Windows 10 Version 22H2, Windows 11 version 22H2 Problem Types: CWE-191 Description: Windows iSCSI Service Denial of Service Vulnerability Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21527