deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-36033
Published: 2023-11-14
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822, CWE-119
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36033; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36033; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36033
CVE: CVE-2023-36035
Published: 2023-11-14
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36035; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36035
CVE: CVE-2023-36036
Published: 2023-11-14
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122, CWE-787
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36036; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36036; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36036
CVE: CVE-2023-36037
Published: 2023-11-14
Description: Microsoft Excel Security Feature Bypass Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36037; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36037
CVE: CVE-2023-36039
Published: 2023-11-14
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36039; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36039
CVE: CVE-2023-36041
Published: 2023-11-14
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36041; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36041; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1835
CVE: CVE-2023-36042
Published: 2023-11-14
Description: Visual Studio Denial of Service Vulnerability
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-122, CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36042; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36042
CVE: CVE-2023-36043
Published: 2023-11-14
Description: Open Management Infrastructure Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36043; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36043
CVE: CVE-2023-36045
Published: 2023-11-14
Description: Microsoft Office Graphics Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36045; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36045
CVE: CVE-2023-36046
Published: 2023-11-14
Description: Windows Authentication Denial of Service Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36046; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36046
CVE: CVE-2023-36047
Published: 2023-11-14
Description: Windows Authentication Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36047; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36047
CVE: CVE-2023-36050
Published: 2023-11-14
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36050; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36050
CVE: CVE-2023-36052
Published: 2023-11-14
Description: Azure CLI REST Command Information Disclosure Vulnerability
CVSS Score: 8.6 (HIGH)
CWE: CWE-359
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36052; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36052
CVE: CVE-2023-36392
Published: 2023-11-14
Description: DHCP Server Service Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36392; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36392
CVE: CVE-2023-36393
Published: 2023-11-14
Description: Windows User Interface Application Core Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36393; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36393
CVE: CVE-2023-36394
Published: 2023-11-14
Description: Windows Search Service Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36394; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36394
CVE: CVE-2023-36395
Published: 2023-11-14
Description: Windows Deployment Services Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36395; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36395
CVE: CVE-2023-36396
Published: 2023-11-14
Description: Windows Compressed Folder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-41
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36396; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36396
CVE: CVE-2023-36397
Published: 2023-11-14
Description: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36397; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36397
CVE: CVE-2023-36398
Published: 2023-11-14
Description: Windows NTFS Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36398; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36398
CVE: CVE-2023-36399
Published: 2023-11-14
Description: Windows Storage Elevation of Privilege Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36399; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36399
CVE: CVE-2023-36400
Published: 2023-11-14
Description: Windows HMAC Key Derivation Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36400; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36400
CVE: CVE-2023-36401
Published: 2023-11-14
Description: Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36401; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36401
CVE: CVE-2023-36402
Published: 2023-11-14
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36402; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36402
CVE: CVE-2023-36403
Published: 2023-11-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36403; http://packetstormsecurity.com/files/176209/Windows-Kernel-Race-Conditions.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36403
CVE: CVE-2023-36404
Published: 2023-11-14
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36404; http://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36404
CVE: CVE-2023-36405
Published: 2023-11-14
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36405; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36405
CVE: CVE-2023-36406
Published: 2023-11-14
Description: Windows Hyper-V Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36406; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36406
CVE: CVE-2023-36407
Published: 2023-11-14
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36407; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36407
CVE: CVE-2023-36408
Published: 2023-11-14
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36408; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36408
CVE: CVE-2023-36410
Published: 2023-11-14
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36410; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36410
CVE: CVE-2023-36413
Published: 2023-11-14
Description: Microsoft Office Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36413; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36413
CVE: CVE-2023-36422
Published: 2023-11-14
Description: Microsoft Windows Defender Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36422; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36422
CVE: CVE-2023-36423
Published: 2023-11-14
Description: Microsoft Remote Registry Service Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36423; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36423
CVE: CVE-2023-36424
Published: 2023-11-14
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36424; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36424
CVE: CVE-2023-36425
Published: 2023-11-14
Description: Windows Distributed File System (DFS) Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36425; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36425
CVE: CVE-2023-36427
Published: 2023-11-14
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36427; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36427
CVE: CVE-2023-36428
Published: 2023-11-14
Description: Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36428; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36428
CVE: CVE-2023-36439
Published: 2023-11-14
Description: Microsoft Exchange Server Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36439; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36439
CVE: CVE-2023-36553
Published: 2023-11-14
Description: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-135; https://fortiguard.com/psirt/FG-IR-23-135
CVE: CVE-2023-36560
Published: 2023-11-14
Description: ASP.NET Security Feature Bypass Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36560; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36560
CVE: CVE-2023-36633
Published: 2023-11-14
Description: An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and modify the title of address book folders of other users via crafted HTTP or HTTPs requests.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285, CWE-732
References: https://fortiguard.com/psirt/FG-IR-23-203; https://fortiguard.com/psirt/FG-IR-23-203
CVE: CVE-2023-36641
Published: 2023-11-14
Description: A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy 1.2 all versions, FortiProxy 1.1, all  versions, FortiProxy 1.0 all versions, FortiOS version 7.4.0, FortiOS version 7.2.0 through 7.2.5, FortiOS version 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions allows attacker to denial of service via specifically crafted HTTP requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-197
References: https://fortiguard.com/psirt/FG-IR-23-151; https://fortiguard.com/psirt/FG-IR-23-151
CVE: CVE-2023-36705
Published: 2023-11-14
Description: Windows Installer Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36705; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36705
CVE: CVE-2023-36719
Published: 2023-11-14
Description: Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36719; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36719
CVE: CVE-2023-38151
Published: 2023-11-14
Description: Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38151; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38151
CVE: CVE-2023-38177
Published: 2023-11-14
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-502
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38177; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38177
CVE: CVE-2023-41676
Published: 2023-11-14
Description: An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version  7.0.0 and before 6.7.5 may allow an attacker with access to windows agent logs to obtain the windows agent password via searching through the logs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-522
References: https://fortiguard.com/psirt/FG-IR-23-290; https://fortiguard.com/psirt/FG-IR-23-290
CVE: CVE-2023-41840
Published: 2023-11-14
Description: A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: https://fortiguard.com/psirt/FG-IR-23-274; https://fortiguard.com/psirt/FG-IR-23-274
CVE: CVE-2023-42783
Published: 2023-11-14
Description: A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 allows attacker to read arbitrary files via crafted http requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23
References: https://fortiguard.com/psirt/FG-IR-23-143; https://fortiguard.com/psirt/FG-IR-23-143
CVE: CVE-2023-44248
Published: 2023-11-14
Description: An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-23-306; https://fortiguard.com/psirt/FG-IR-23-306
CVE: CVE-2023-45582
Published: 2023-11-14
Description: An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and before 6.4.8 may allow an unauthenticated attacker to  perform a brute force attack on the affected endpoints via repeated login attempts.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-307
References: https://fortiguard.com/psirt/FG-IR-23-287; https://fortiguard.com/psirt/FG-IR-23-287
CVE: CVE-2023-45585
Published: 2023-11-14
Description: An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version  6.6.3 and below, version 6.5.1 and below, version 6.4.2 and below, version 6.3.3 and below, version 6.2.1 and below, version 6.1.2 and below, version 5.4.0, version 5.3.3 and below may allow an authenticated user to view an encrypted ElasticSearch password via debug log files generated when FortiSIEM is configured with ElasticSearch Event Storage.
CVSS Score: 2.3 (LOW)
CWE: CWE-532
References: https://fortiguard.com/psirt/FG-IR-23-392; https://fortiguard.com/psirt/FG-IR-23-392
CVE: CVE-2021-26345
Published: 2023-11-14
Description: Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read potentially resulting in a denial of service.
CVSS Score: 1.9 (LOW)
CWE: CWE-125
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
CVE: CVE-2021-46748
Published: 2023-11-14
Description: Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a TA (Trusted Application) resulting in a potential denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00971.html; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-6003
CVE: CVE-2021-46758
Published: 2023-11-14
Description: Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapped beyond SPI flash resulting in a potential loss of availability and integrity.









CVSS Score: 6.1 (MEDIUM)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
CVE: CVE-2021-46766
Published: 2023-11-14
Description: Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leading to a loss of confidentiality.
CVSS Score: 2.5 (LOW)
CWE: CWE-459
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE: CVE-2021-46774
Published: 2023-11-14
Description: Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.
CVSS Score: 6.7 (MEDIUM)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE: CVE-2022-23820
Published: 2023-11-14
Description: Failure to validate the AMD SMM communication buffer
may allow an attacker to corrupt the SMRAM potentially leading to arbitrary
code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001
CVE: CVE-2022-23821
Published: 2023-11-14
Description: Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution.









CVSS Score: 9.8 (CRITICAL)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-4002
CVE: CVE-2022-23830
Published: 2023-11-14
Description: SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.
CVSS Score: 1.9 (LOW)
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-5001; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-3002
CVE: CVE-2022-24379
Published: 2023-11-14
Description: Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html
CVE: CVE-2022-27229
Published: 2023-11-14
Description: Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-249, CWE-22
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
CVE: CVE-2022-29262
Published: 2023-11-14
Description: Improper buffer restrictions in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html
CVE: CVE-2022-29510
Published: 2023-11-14
Description: Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-92, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html