deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-28601
Published: 2023-06-13
Description: Zoom for Windows clients prior to 5.14.0 contain an improper restriction of operations within the bounds of a memory buffer vulnerability.  A malicious user may alter protected Zoom Client memory buffer potentially causing integrity issues within the Zoom Client.
CVSS Score: 8.3 (HIGH)
CWE: CWE-358, CWE-119
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-28602
Published: 2023-06-13
Description: Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability.  A malicious user may potentially downgrade Zoom Client components to previous versions.
CVSS Score: 2.8 (LOW)
CWE: CWE-347, CWE-347
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-28603
Published: 2023-06-13
Description: Zoom VDI client installer  prior to 5.14.0 contains an improper access control vulnerability.  A malicious user may potentially delete local files without proper permissions.
CVSS Score: 7.7 (HIGH)
CWE: CWE-73
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-34113
Published: 2023-06-13
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36541.
CVE: CVE-2023-34120
Published: 2023-06-13
Description: Improper privilege management in Zoom for Windows, Zoom Rooms for Windows, and Zoom VDI for Windows clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege via local access. Users may potentially utilize higher level system privileges maintained by the Zoom client to spawn processes with escalated privileges.
CVSS Score: 8.7 (HIGH)
CWE: CWE-347
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-34121
Published: 2023-06-13
Description: Improper input validation  in the Zoom for Windows, Zoom Rooms, Zoom VDI Windows Meeting  clients before 5.14.0  may allow an authenticated user to potentially enable an escalation of privilege  via network access.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-34122
Published: 2023-06-13
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as this is a duplicate of CVE-2023-36540.
CVE: CVE-2023-3214
Published: 2023-06-13
Description: Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html; https://crbug.com/1450568; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEH75UOM7FAXDUPC37YHP7ONL2HSDIJR/
CVE: CVE-2023-3215
Published: 2023-06-13
Description: Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html; https://crbug.com/1446274; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEH75UOM7FAXDUPC37YHP7ONL2HSDIJR/
CVE: CVE-2023-3216
Published: 2023-06-13
Description: Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html; https://crbug.com/1450114; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JEH75UOM7FAXDUPC37YHP7ONL2HSDIJR/
CVE: CVE-2023-3217
Published: 2023-06-13
Description: Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: http://packetstormsecurity.com/files/173495/Chrome-device-OpenXrApiWrapper-InitSession-Heap-Use-After-Free.html; https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_13.html; https://crbug.com/1450601
CVE: CVE-2023-3224
Published: 2023-06-13
Description: Code Injection in GitHub repository nuxt/nuxt prior to 3.5.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94, CWE-94
References: https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff; https://huntr.dev/bounties/1eb74fd8-0258-4c1f-a904-83b52e373a87; https://github.com/nuxt/nuxt/commit/65a8f4eb3ef1b249a95fd59e323835a96428baff
CVE: CVE-2022-43684
Published: 2023-06-13
Description: ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality.



Additional Details

This issue is present in the following supported ServiceNow releases: 



  *  Quebec prior to Patch 10 Hot Fix 8b
  *  Rome prior to Patch 10 Hot Fix 1
  *  San Diego prior to Patch 7
  *  Tokyo prior to Tokyo Patch 1; and 
  *  Utah prior to Utah General Availability 




If this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-200, CWE-668
References: http://packetstormsecurity.com/files/173354/ServiceNow-Insecure-Access-Control-Full-Admin-Compromise.html; http://seclists.org/fulldisclosure/2023/Jul/11; https://news.ycombinator.com/item?id=36638530
CVE: CVE-2023-27836
Published: 2023-06-13
Description: TP-Link TL-WPA8630P (US)_ V2_ Version 171011 was discovered to contain a command injection vulnerability via the devicePwd parameter in the function sub_ 40A80C.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA8630P%202; https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA8630P%202
CVE: CVE-2023-34114
Published: 2023-06-13
Description: Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10  may allow an authenticated user to potentially enable information disclosure via network access. 
CVSS Score: 7.4 (HIGH)
CWE: CWE-668, CWE-668
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-34115
Published: 2023-06-13
Description: Buffer copy without checking size of input  in Zoom Meeting SDK  before 5.13.0 may allow an authenticated user to potentially enable a denial of service via local access. This issue may result in the Zoom Meeting SDK to crash and need to be restarted.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-120, CWE-120
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2023-34965
Published: 2023-06-13
Description: SSPanel-Uim 2023.3 does not restrict access to the /link/ interface which can lead to a leak of user information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-863
References: https://docs.google.com/document/d/1TbHYGW65o1HBZoDf0rUDQMHPJE6qfQAvqdFv1DYY4BU/edit?usp=sharing; https://github.com/AgentY0/CVE-2023-34965; https://github.com/Anankke/SSPanel-Uim
CVE: CVE-2022-28550
Published: 2023-06-13
Description: Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Overflow via shellescape(), jhead.c, jhead. jhead copies strings to a stack buffer when it detects a &i or &o. However, jhead does not check the boundary of the stack buffer. As a result, there will be a stack buffer overflow problem when multiple `&i` or `&o` are given.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-120, CWE-787
References: https://github.com/Matthias-Wandel/jhead/commit/64894dbc7d8e1e232e85f1cab25c64290b2fc167; https://github.com/Matthias-Wandel/jhead/issues/51; https://github.com/Matthias-Wandel/jhead/commit/64894dbc7d8e1e232e85f1cab25c64290b2fc167
CVE: CVE-2022-47376
Published: 2023-06-13
Description: The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data.
CVSS Score: 7.3 (HIGH)
CWE: CWE-257, CWE-522
References: https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/alaris-infusion-central-recoverable-password-vulnerability; https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/alaris-infusion-central-recoverable-password-vulnerability
CVE: CVE-2023-29562
Published: 2023-06-13
Description: TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA7510; https://github.com/lzd521/IOT/tree/main/TP-Link%20WPA7510
CVE: CVE-2023-24546
Published: 2023-06-13
Description: On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service.
CVSS Score: 8.1 (HIGH)
CWE: CWE-284, CWE-863
References: https://www.arista.com/en/support/advisories-notices/security-advisory/17022-security-advisory-0083; https://www.arista.com/en/support/advisories-notices/security-advisory/17022-security-advisory-0083
CVE: CVE-2023-2637
Published: 2023-06-13
Description: 
Rockwell Automation's FactoryTalk System Services uses a hard-coded cryptographic key to generate administrator cookies.  Hard-coded cryptographic key may lead to privilege escalation.  This vulnerability may allow a local, authenticated non-admin user to generate an invalid administrator cookie giving them administrative privileges to the FactoryTalk Policy Manger database. This may allow the threat actor to make malicious changes to the database that will be deployed when a legitimate FactoryTalk Policy Manager user deploys a security policy model. User interaction is required for this vulnerability to be successfully exploited.


CVSS Score: 7.3 (HIGH)
CWE: CWE-321, CWE-798
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683
CVE: CVE-2023-2638
Published: 2023-06-13
Description: 
Rockwell Automation's FactoryTalk System Services does not verify that a backup configuration archive is password protected.

 

Improper authorization in FTSSBackupRestore.exe may lead to the loading of malicious configuration archives.  This vulnerability may allow a local, authenticated non-admin user to craft a malicious backup archive, without password protection, that will be loaded by FactoryTalk System Services as a valid backup when a restore procedure takes places. User interaction is required for this vulnerability to be successfully exploited.



CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683
CVE: CVE-2023-2639
Published: 2023-06-13
Description: The underlying feedback mechanism of 

Rockwell Automation's FactoryTalk System Services that transfers the FactoryTalk Policy Manager rules to relevant devices on the network does not verify that the origin of the communication is from a legitimate local client device.  This may allow a threat actor to craft a malicious website that, when visited, will send a malicious script that can connect to the local WebSocket endpoint and wait for events as if it was a valid client device. If successfully exploited, this would allow a threat actor to receive information including whether FactoryTalk Policy Manager is installed and potentially the entire security policy. 



CVSS Score: 4.1 (MEDIUM)
CWE: CWE-346, CWE-346
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139683
CVE: CVE-2023-2778
Published: 2023-06-13
Description: 
A denial-of-service vulnerability exists in Rockwell Automation FactoryTalk Transaction Manager. This vulnerability can be exploited by sending a modified packet to port 400. If exploited, the application could potentially crash or experience a high CPU or memory usage condition, causing intermittent application functionality issues. The application would need to be restarted to recover from the DoS.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400
References: https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744; https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1139744
CVE: CVE-2023-33817
Published: 2023-06-13
Description: hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/leekenghwa/CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5; https://github.com/leekenghwa/CVE-2023-33817---SQL-Injection-found-in-HotelDruid-3.0.5
CVE: CVE-2023-34537
Published: 2023-06-13
Description: A Reflected XSS was discovered in HotelDruid version 3.0.5, an attacker can issue malicious code/command on affected webpage's parameter to trick user on browser and/or exfiltrate data.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/leekenghwa/CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5; https://github.com/leekenghwa/CVE-2023-34537---XSS-reflected--found-in-HotelDruid-3.0.5
CVE: CVE-2023-34944
Published: 2023-06-13
Description: An arbitrary file upload vulnerability in the /fileUpload.lib.php component of Chamilo 1.11.* up to v1.11.18 allows attackers to execute arbitrary code via uploading a crafted SVG file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://chamilo.com; https://github.com/chamilo/chamilo-lms/commit/0d0c88c4806280ac9b70a299d6e3099269c9bc54; https://github.com/chamilo/chamilo-lms/commit/f6e83550c2d17fc93a65ec4be602a78312289f37
CVE: CVE-2023-24469
Published: 2023-06-13
Description: Potential Cross-Site Scripting in ArcSight Logger versions prior to 7.3.0
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://portal.microfocus.com/s/article/KM000018224?language=en_US%2C; https://www.microfocus.com/documentation/arcsight/logger-7.3/logger-7.3-release-notes/; https://www.microfocus.com/support/downloads/
CVE: CVE-2023-31142
Published: 2023-06-13
Description: Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, if a site has modified their general category permissions, they could be set back to the default. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. A workaround, only if you are modifying the general category permissions, is to use a new category for the same purpose.
CVSS Score: 2.0 (LOW)
CWE: CWE-732
References: https://github.com/discourse/discourse/security/advisories/GHSA-286w-97m2-78x2; https://github.com/discourse/discourse/security/advisories/GHSA-286w-97m2-78x2
CVE: CVE-2023-32061
Published: 2023-06-13
Description: Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, the lack of restrictions on the iFrame tag makes it easy for an attacker to exploit the vulnerability and hide subsequent comments from other users. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-863
References: https://github.com/discourse/discourse/security/advisories/GHSA-prx4-49m8-874g; https://github.com/discourse/discourse/security/advisories/GHSA-prx4-49m8-874g
CVE: CVE-2023-32301
Published: 2023-06-13
Description: Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, multiple duplicate topics could be created if topic embedding is enabled. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. As a workaround, disable topic embedding if it has been enabled.
CVSS Score: 3.1 (LOW)
CWE: CWE-116
References: https://github.com/discourse/discourse/security/advisories/GHSA-p2jx-m2j5-hqh4; https://github.com/discourse/discourse/security/advisories/GHSA-p2jx-m2j5-hqh4
CVE: CVE-2023-34250
Published: 2023-06-13
Description: Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, an attacker could use the new topics dismissal endpoint to reveal the number of topics recently created (but not the actual content thereof) in categories they didn't have access to. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. There are no known workarounds.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-200, CWE-668
References: https://github.com/discourse/discourse/security/advisories/GHSA-q8m5-wmjr-3ppg; https://github.com/discourse/discourse/security/advisories/GHSA-q8m5-wmjr-3ppg
CVE: CVE-2023-24470
Published: 2023-06-13
Description: Potential XML External Entity Injection in ArcSight Logger versions prior to 7.3.0.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-611, CWE-611
References: https://portal.microfocus.com/s/article/KM000018224?language=en_US; https://www.microfocus.com/documentation/arcsight/logger-7.3/logger-7.3-release-notes/; https://www.microfocus.com/support/downloads/%2C
CVE: CVE-2023-21565
Published: 2023-06-14
Description: Azure DevOps Server Spoofing Vulnerability
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21565; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21565
CVE: CVE-2023-21569
Published: 2023-06-14
Description: Azure DevOps Server Spoofing Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569
CVE: CVE-2023-24938
Published: 2023-06-14
Description: Windows CryptoAPI  Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24938; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24938
CVE: CVE-2023-29346
Published: 2023-06-14
Description: NTFS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-681
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29346; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29346
CVE: CVE-2023-29351
Published: 2023-06-14
Description: Windows Group Policy Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29351; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29351
CVE: CVE-2023-29352
Published: 2023-06-14
Description: Windows Remote Desktop Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29352; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29352
CVE: CVE-2023-29353
Published: 2023-06-14
Description: Sysinternals Process Monitor for Windows Denial of Service Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29353; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29353
CVE: CVE-2023-29355
Published: 2023-06-14
Description: DHCP Server Service Information Disclosure Vulnerability
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29355; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29355
CVE: CVE-2023-29357
Published: 2023-06-14
Description: Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-303
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29357
CVE: CVE-2023-29358
Published: 2023-06-14
Description: Windows GDI Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29358; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29358
CVE: CVE-2023-29359
Published: 2023-06-14
Description: GDI Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29359; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29359
CVE: CVE-2023-29360
Published: 2023-06-14
Description: Microsoft Streaming Service Elevation of Privilege Vulnerability
CVSS Score: 8.4 (HIGH)
CWE: CWE-822
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-29360
CVE: CVE-2023-29361
Published: 2023-06-14
Description: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29361; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29361
CVE: CVE-2023-29362
Published: 2023-06-14
Description: Remote Desktop Client Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29362; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29362
CVE: CVE-2023-29363
Published: 2023-06-14
Description: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29363; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29363
CVE: CVE-2023-29364
Published: 2023-06-14
Description: Windows Authentication Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29364; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29364
CVE: CVE-2023-29365
Published: 2023-06-14
Description: Windows Media Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29365; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29365
CVE: CVE-2023-29366
Published: 2023-06-14
Description: Windows Geolocation Service Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29366; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29366