deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-20509
Published: 2024-08-13
Description: An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-125
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-20510
Published: 2024-08-13
Description: An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service.
CVSS Score: 4.7 (MEDIUM)
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-20512
Published: 2024-08-13
Description: A hardcoded AES   key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.
CVSS Score: 1.9 (LOW)
CWE: CWE-798
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-20513
Published: 2024-08-13
Description: An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially resulting in a denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-787
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-20518
Published: 2024-08-13
Description: Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality.
CVSS Score: 1.9 (LOW)
CWE: CWE-459
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5002.html
CVE: CVE-2023-20578
Published: 2024-08-13
Description: A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
CVSS Score: 7.5 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE: CVE-2023-20584
Published: 2024-08-13
Description: IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.
CVSS Score: 5.3 (MEDIUM)
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE: CVE-2023-20591
Published: 2024-08-13
Description: Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, potentially resulting in loss of
confidentiality, integrity, and availability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE: CVE-2023-31304
Published: 2024-08-13
Description: Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF)      to modify the PCIe® lane count and speed, potentially leading to a loss of availability.
CVSS Score: 2.3 (LOW)
CWE: CWE-1284
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-31305
Published: 2024-08-13
Description: Generation of weak and predictable Initialization Vector (IV) in PMFW (Power Management Firmware) may allow an attacker with privileges to reuse IV values to reverse-engineer debug data, potentially resulting in information disclosure.
CVSS Score: 1.9 (LOW)
CWE: CWE-338
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-31307
Published: 2024-08-13
Description: Improper validation of array index in Power Management Firmware (PMFW) may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service.
CVSS Score: 2.3 (LOW)
CWE: CWE-129, CWE-129
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-31310
Published: 2024-08-13
Description: Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting in a loss of integrity and/or availability.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-1284
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html
CVE: CVE-2023-31339
Published: 2024-08-13
Description: Improper input validation in ARM® Trusted Firmware used in AMD’s Zynq™ UltraScale+™) MPSoC/RFSoC may allow a privileged attacker to perform out of bound reads, potentially resulting in data leakage and denial of service.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-125
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8002
CVE: CVE-2023-31341
Published: 2024-08-13
Description: Insufficient
validation of the Input Output Control (IOCTL) input buffer in AMD μProf may
allow an authenticated attacker to cause an out-of-bounds write, potentially
causing a Windows® OS crash, resulting in denial of service.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE: CVE-2023-31348
Published: 2024-08-13
Description: A DLL hijacking vulnerability in AMD μProf could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-427, CWE-400
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE: CVE-2023-31349
Published: 2024-08-13
Description: Incorrect default permissions in the AMD μProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE: CVE-2023-31356
Published: 2024-08-13
Description: Incomplete system memory cleanup in SEV firmware could
allow a privileged attacker to corrupt guest private memory, potentially
resulting in a loss of data integrity.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html; https://www.amd.com/en/resources/product-security/bulletin/amd-sb-5004.html
CVE: CVE-2023-31366
Published: 2024-08-13
Description: Improper input validation in AMD μProf could allow an attacker to perform a write to an invalid address, potentially resulting in denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-9001
CVE: CVE-2024-21981
Published: 2024-08-13
Description: Improper key usage control in AMD Secure Processor
(ASP) may allow an attacker with local access who has gained arbitrary code
execution privilege in ASP to
extract ASP cryptographic keys, potentially resulting in loss of
confidentiality and integrity.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-639
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-3003.html
CVE: CVE-2024-36446
Published: 2024-08-13
Description: The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due to improper access control. A successful exploit could allow an attacker to bypass the authorization schema.
CVSS Score: 8.8 (HIGH)
References: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0017
CVE: CVE-2024-37015
Published: 2024-08-13
Description: An issue was discovered in Ada Web Server 20.0. When configured to use SSL (which is not the default setting), the SSL/TLS used to establish connections to external services is done without proper hostname validation. This is exploitable by man-in-the-middle attackers.
CVSS Score: 7.4 (HIGH)
CWE: CWE-297
References: https://docs.adacore.com/corp/security-advisories/SEC.AWS-0031-v2.pdf; https://github.com/AdaCore/aws
CVE: CVE-2024-41613
Published: 2024-08-13
Description: A Cross Site Scripting (XSS) vulnerability in Symphony CMS 2.7.10 allows remote attackers to inject arbitrary web script or HTML by editing note.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OoLs5/VulDiscovery/blob/main/symphony_xss_vul.pdf
CVE: CVE-2024-41614
Published: 2024-08-13
Description: symphonycms <=2.7.10 is vulnerable to Cross Site Scripting (XSS) in the Comment component for articles.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/OoLs5/VulDiscovery/blob/main/Symphony_CMS_XSS.pdf
CVE: CVE-2024-41711
Published: 2024-08-13
Description: A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the 6970 Conference Unit, through R6.4.0.HF1 (R6.4.0.136) could allow an unauthenticated attacker with physical access to the phone to conduct an argument injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the context of the system.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-88
References: https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0020
CVE: CVE-2024-6618
Published: 2024-08-13
Description: In Ocean Data Systems Dream Report, a path traversal vulnerability could allow an attacker to perform remote code execution through the injection of a malicious dynamic-link library (DLL).
CWE: CWE-22
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08
CVE: CVE-2024-6619
Published: 2024-08-13
Description: In Ocean Data Systems Dream Report, an incorrect permission vulnerability could allow a local unprivileged attacker to escalate their privileges and could cause a denial-of-service.
CWE: CWE-732
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-08
CVE: CVE-2024-7113
Published: 2024-08-13
Description: If exploited, this vulnerability could cause a SuiteLink server to consume excessive system resources and slow down processing of Data I/O for the duration of the attack.
CWE: CWE-770
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-226-01
CVE: CVE-2024-29995
Published: 2024-08-13
Description: Windows Kerberos Elevation of Privilege Vulnerability
CVSS Score: 8.1 (HIGH)
CWE: CWE-208
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29995
CVE: CVE-2024-37968
Published: 2024-08-13
Description: Windows DNS Spoofing Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968
CVE: CVE-2024-38063
Published: 2024-08-13
Description: Windows TCP/IP Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-191
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38063
CVE: CVE-2024-38084
Published: 2024-08-13
Description: Microsoft OfficePlus Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38084
CVE: CVE-2024-38098
Published: 2024-08-13
Description: Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38098
CVE: CVE-2024-38106
Published: 2024-08-13
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38106
CVE: CVE-2024-38107
Published: 2024-08-13
Description: Windows Power Dependency Coordinator Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38107; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-38107
CVE: CVE-2024-38108
Published: 2024-08-13
Description: Azure Stack Hub Spoofing Vulnerability
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38108
CVE: CVE-2024-38109
Published: 2024-08-13
Description: An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38109
CVE: CVE-2024-38114
Published: 2024-08-13
Description: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38114
CVE: CVE-2024-38115
Published: 2024-08-13
Description: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38115
CVE: CVE-2024-38116
Published: 2024-08-13
Description: Windows IP Routing Management Snapin Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38116
CVE: CVE-2024-38117
Published: 2024-08-13
Description: NTFS Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38117
CVE: CVE-2024-38118
Published: 2024-08-13
Description: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38118
CVE: CVE-2024-38120
Published: 2024-08-13
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38120
CVE: CVE-2024-38121
Published: 2024-08-13
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38121
CVE: CVE-2024-38122
Published: 2024-08-13
Description: Microsoft Local Security Authority (LSA) Server Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38122
CVE: CVE-2024-38123
Published: 2024-08-13
Description: Windows Bluetooth Driver Information Disclosure Vulnerability
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38123
CVE: CVE-2024-38125
Published: 2024-08-13
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-197
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38125
CVE: CVE-2024-38126
Published: 2024-08-13
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38126
CVE: CVE-2024-38127
Published: 2024-08-13
Description: Windows Hyper-V Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38127
CVE: CVE-2024-38128
Published: 2024-08-13
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38128
CVE: CVE-2024-38130
Published: 2024-08-13
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38130
CVE: CVE-2024-38131
Published: 2024-08-13
Description: Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-591
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38131
CVE: CVE-2024-38132
Published: 2024-08-13
Description: Windows Network Address Translation (NAT) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38132
CVE: CVE-2024-38133
Published: 2024-08-13
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-138
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38133
CVE: CVE-2024-38134
Published: 2024-08-13
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38134
CVE: CVE-2024-38135
Published: 2024-08-13
Description: Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38135
CVE: CVE-2024-38136
Published: 2024-08-13
Description: Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38136
CVE: CVE-2024-38137
Published: 2024-08-13
Description: Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416, CWE-591, CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38137
CVE: CVE-2024-38138
Published: 2024-08-13
Description: Windows Deployment Services Remote Code Execution Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38138
CVE: CVE-2024-38140
Published: 2024-08-13
Description: Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38140; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2062
CVE: CVE-2024-38141
Published: 2024-08-13
Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38141
CVE: CVE-2024-38142
Published: 2024-08-13
Description: Windows Secure Kernel Mode Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38142
CVE: CVE-2024-38143
Published: 2024-08-13
Description: Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-306
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38143
CVE: CVE-2024-38144
Published: 2024-08-13
Description: Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38144
CVE: CVE-2024-38145
Published: 2024-08-13
Description: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38145
CVE: CVE-2024-38146
Published: 2024-08-13
Description: Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38146
CVE: CVE-2024-38147
Published: 2024-08-13
Description: Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38147
CVE: CVE-2024-38148
Published: 2024-08-13
Description: Windows Secure Channel Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38148
CVE: CVE-2024-38150
Published: 2024-08-13
Description: Windows DWM Core Library Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38150
CVE: CVE-2024-38151
Published: 2024-08-13
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38151
CVE: CVE-2024-38152
Published: 2024-08-13
Description: Windows OLE Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38152
CVE: CVE-2024-38153
Published: 2024-08-13
Description: Windows Kernel Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38153
CVE: CVE-2024-38154
Published: 2024-08-13
Description: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38154
CVE: CVE-2024-38155
Published: 2024-08-13
Description: Security Center Broker Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38155
CVE: CVE-2024-38157
Published: 2024-08-13
Description: Azure IoT SDK Remote Code Execution Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38157
CVE: CVE-2024-38158
Published: 2024-08-13
Description: Azure IoT SDK Remote Code Execution Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38158
CVE: CVE-2024-38159
Published: 2024-08-13
Description: Windows Network Virtualization Remote Code Execution Vulnerability
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38159
CVE: CVE-2024-38160
Published: 2024-08-13
Description: Windows Network Virtualization Remote Code Execution Vulnerability
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38160
CVE: CVE-2024-38161
Published: 2024-08-13
Description: Windows Mobile Broadband Driver Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38161
CVE: CVE-2024-38162
Published: 2024-08-13
Description: Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38162
CVE: CVE-2024-38165
Published: 2024-08-13
Description: Windows Compressed Folder Tampering Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38165
CVE: CVE-2024-38167
Published: 2024-08-13
Description: .NET and Visual Studio Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38167
CVE: CVE-2024-38168
Published: 2024-08-13
Description: .NET and Visual Studio Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38168
CVE: CVE-2024-38169
Published: 2024-08-13
Description: Microsoft Office Visio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38169