deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-36953
Published: 2021-10-13
Description: Windows TCP/IP Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36953; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36953
CVE: CVE-2021-36970
Published: 2021-10-13
Description: Windows Print Spooler Spoofing Vulnerability
CVSS Score: 8.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36970; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-36970
CVE: CVE-2021-38662
Published: 2021-10-13
Description: Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38662; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38662
CVE: CVE-2021-38663
Published: 2021-10-13
Description: Windows exFAT File System Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38663; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38663
CVE: CVE-2021-38672
Published: 2021-10-13
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38672; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-38672
CVE: CVE-2021-40443
Published: 2021-10-13
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40443; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40443
CVE: CVE-2021-40449
Published: 2021-10-13
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC-Use-After-Free-Local-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40449; http://packetstormsecurity.com/files/164926/Win32k-NtGdiResetDC-Use-After-Free-Local-Privilege-Escalation.html
CVE: CVE-2021-40450
Published: 2021-10-13
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40450; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40450; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-40450
CVE: CVE-2021-40454
Published: 2021-10-13
Description: Rich Text Edit Control Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40454; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40454
CVE: CVE-2021-40455
Published: 2021-10-13
Description: Windows Installer Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40455; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40455
CVE: CVE-2021-40456
Published: 2021-10-13
Description: Windows AD FS Security Feature Bypass Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40456; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40456
CVE: CVE-2021-40457
Published: 2021-10-13
Description: Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40457; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40457
CVE: CVE-2021-40460
Published: 2021-10-13
Description: Windows Remote Procedure Call Runtime Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40460; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40460
CVE: CVE-2021-40461
Published: 2021-10-13
Description: Windows Hyper-V Remote Code Execution Vulnerability
CVSS Score: 8.0 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40461; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40461
CVE: CVE-2021-40462
Published: 2021-10-13
Description: Windows Media Foundation Dolby Digital Atmos Decoders Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40462; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40462
CVE: CVE-2021-40463
Published: 2021-10-13
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 7.7 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40463; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40463
CVE: CVE-2021-40464
Published: 2021-10-13
Description: Windows Nearby Sharing Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40464; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40464
CVE: CVE-2021-40465
Published: 2021-10-13
Description: Windows Text Shaping Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40465; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40465
CVE: CVE-2021-40466
Published: 2021-10-13
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40466; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40466
CVE: CVE-2021-40467
Published: 2021-10-13
Description: Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40467; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40467
CVE: CVE-2021-40468
Published: 2021-10-13
Description: Windows Bind Filter Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40468; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40468
CVE: CVE-2021-40469
Published: 2021-10-13
Description: Windows DNS Server Remote Code Execution Vulnerability
CVSS Score: 7.2 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40469; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40469
CVE: CVE-2021-40470
Published: 2021-10-13
Description: DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40470; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40470
CVE: CVE-2021-40471
Published: 2021-10-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40471; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40471
CVE: CVE-2021-40472
Published: 2021-10-13
Description: Microsoft Excel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40472; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40472
CVE: CVE-2021-40473
Published: 2021-10-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40473; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40473
CVE: CVE-2021-40474
Published: 2021-10-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40474; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40474
CVE: CVE-2021-40475
Published: 2021-10-13
Description: Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40475; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40475
CVE: CVE-2021-40476
Published: 2021-10-13
Description: Windows AppContainer Elevation Of Privilege Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://packetstormsecurity.com/files/164942/Microsoft-Windows-WSAQuerySocketSecurity-AppContainer-Privilege-Escalation.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40476; http://packetstormsecurity.com/files/164942/Microsoft-Windows-WSAQuerySocketSecurity-AppContainer-Privilege-Escalation.html
CVE: CVE-2021-40477
Published: 2021-10-13
Description: Windows Event Tracing Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40477; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40477
CVE: CVE-2021-40478
Published: 2021-10-13
Description: Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40478; https://www.zerodayinitiative.com/advisories/ZDI-21-1155/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40478
CVE: CVE-2021-40479
Published: 2021-10-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40479; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40479
CVE: CVE-2021-40480
Published: 2021-10-13
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40480; https://www.zerodayinitiative.com/advisories/ZDI-21-1159/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40480
CVE: CVE-2021-40481
Published: 2021-10-13
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40481; https://www.zerodayinitiative.com/advisories/ZDI-21-1160/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40481
CVE: CVE-2021-40482
Published: 2021-10-13
Description: Microsoft SharePoint Server Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40482; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40482
CVE: CVE-2021-40483
Published: 2021-10-13
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40483; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40483
CVE: CVE-2021-40484
Published: 2021-10-13
Description: Microsoft SharePoint Server Spoofing Vulnerability
CVSS Score: 7.6 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40484; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40484
CVE: CVE-2021-40485
Published: 2021-10-13
Description: Microsoft Excel Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40485; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40485
CVE: CVE-2021-40486
Published: 2021-10-13
Description: Microsoft Word Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40486; https://www.zerodayinitiative.com/advisories/ZDI-21-1158/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40486
CVE: CVE-2021-40487
Published: 2021-10-13
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-94
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40487; https://www.zerodayinitiative.com/advisories/ZDI-21-1225/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40487
CVE: CVE-2021-40488
Published: 2021-10-13
Description: Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40488; https://www.zerodayinitiative.com/advisories/ZDI-21-1153/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40488
CVE: CVE-2021-40489
Published: 2021-10-13
Description: Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40489; https://www.zerodayinitiative.com/advisories/ZDI-21-1156/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-40489
CVE: CVE-2021-41330
Published: 2021-10-13
Description: Microsoft Windows Media Foundation Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41330; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41330
CVE: CVE-2021-41331
Published: 2021-10-13
Description: Windows Media Audio Decoder Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41331; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41331
CVE: CVE-2021-41332
Published: 2021-10-13
Description: Windows Print Spooler Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41332; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41332
CVE: CVE-2021-41334
Published: 2021-10-13
Description: Windows Desktop Bridge Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41334; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41334
CVE: CVE-2021-41335
Published: 2021-10-13
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41335; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41335
CVE: CVE-2021-41336
Published: 2021-10-13
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41336; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41336
CVE: CVE-2021-41337
Published: 2021-10-13
Description: Active Directory Security Feature Bypass Vulnerability
CVSS Score: 4.9 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41337; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41337
CVE: CVE-2021-41338
Published: 2021-10-13
Description: Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41338; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41338
CVE: CVE-2021-41339
Published: 2021-10-13
Description: Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41339; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41339
CVE: CVE-2021-41340
Published: 2021-10-13
Description: Windows Graphics Component Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41340; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41340
CVE: CVE-2021-41342
Published: 2021-10-13
Description: Windows MSHTML Platform Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41342; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41342
CVE: CVE-2021-41343
Published: 2021-10-13
Description: Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41343; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41343
CVE: CVE-2021-41344
Published: 2021-10-13
Description: Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Score: 8.1 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41344; https://www.zerodayinitiative.com/advisories/ZDI-21-1224/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41344
CVE: CVE-2021-41345
Published: 2021-10-13
Description: Storage Spaces Controller Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-190
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41345; https://www.zerodayinitiative.com/advisories/ZDI-21-1154/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41345
CVE: CVE-2021-41346
Published: 2021-10-13
Description: Console Window Host Security Feature Bypass Vulnerability
CVSS Score: 5.3 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41346; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41346
CVE: CVE-2021-41347
Published: 2021-10-13
Description: Windows AppX Deployment Service Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41347; https://www.zerodayinitiative.com/advisories/ZDI-21-1161/; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41347
CVE: CVE-2021-41348
Published: 2021-10-13
Description: Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS Score: 8.0 (HIGH)
CWE: CWE-269
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41348; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41348
CVE: CVE-2021-41350
Published: 2021-10-13
Description: Microsoft Exchange Server Spoofing Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41350; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41350
CVE: CVE-2021-41352
Published: 2021-10-13
Description: SCOM Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41352; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41352
CVE: CVE-2021-41353
Published: 2021-10-13
Description: Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41353; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41353
CVE: CVE-2021-41354
Published: 2021-10-13
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41354; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41354
CVE: CVE-2021-41355
Published: 2021-10-13
Description: .NET Core and Visual Studio Information Disclosure Vulnerability
CVSS Score: 5.7 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41355; https://www.oracle.com/security-alerts/cpujan2022.html; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41355
CVE: CVE-2021-41357
Published: 2021-10-13
Description: Win32k Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41357; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41357; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-41357
CVE: CVE-2021-41361
Published: 2021-10-13
Description: Active Directory Federation Server Spoofing Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41361; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41361
CVE: CVE-2021-41363
Published: 2021-10-13
Description: Intune Management Extension Security Feature Bypass Vulnerability
CVSS Score: 4.2 (MEDIUM)
References: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41363; https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-41363
CVE: CVE-2021-20795
Published: 2021-10-13
Description: Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://jvn.jp/en/jp/JVN52694228/index.html; https://kb.cybozu.support/article/37422; https://jvn.jp/en/jp/JVN52694228/index.html
CVE: CVE-2021-20796
Published: 2021-10-13
Description: Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://jvn.jp/en/jp/JVN52694228/index.html; https://kb.cybozu.support/article/37427; https://jvn.jp/en/jp/JVN52694228/index.html
CVE: CVE-2021-20797
Published: 2021-10-13
Description: Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN52694228/index.html; https://kb.cybozu.support/article/37429; https://jvn.jp/en/jp/JVN52694228/index.html
CVE: CVE-2021-20798
Published: 2021-10-13
Description: Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jvn.jp/en/jp/JVN52694228/index.html; https://kb.cybozu.support/article/37424; https://jvn.jp/en/jp/JVN52694228/index.html