deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-40718
Published: 2023-10-10
Description: A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets.
CVSS Score: 7.5 (HIGH)
CWE: CWE-436, CWE-436
References: https://fortiguard.com/psirt/FG-IR-23-090; https://fortiguard.com/psirt/FG-IR-23-090
CVE: CVE-2023-41675
Published: 2023-10-10
Description: A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and version 7.0.0 through 7.0.8 may allow an unauthenticated remote attacker to crash the WAD process via multiple crafted packets reaching proxy policies or firewall policies with proxy mode alongside SSL deep packet inspection.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://fortiguard.com/psirt/FG-IR-23-184; https://fortiguard.com/psirt/FG-IR-23-184
CVE: CVE-2023-41679
Published: 2023-10-10
Description: An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "device management" permission on his profile and belonging to a specific ADOM to add and delete CLI script on other ADOMs
CVSS Score: 8.5 (HIGH)
CWE: CWE-284
References: https://fortiguard.com/psirt/FG-IR-23-062; https://fortiguard.com/psirt/FG-IR-23-062
CVE: CVE-2023-41838
Published: 2023-10-10
Description: An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli.
CVSS Score: 7.1 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-169; https://fortiguard.com/psirt/FG-IR-23-169
CVE: CVE-2023-41841
Published: 2023-10-10
Description: An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions.
CVSS Score: 8.1 (HIGH)
CWE: CWE-285
References: https://fortiguard.com/psirt/FG-IR-23-318; https://fortiguard.com/psirt/FG-IR-23-318
CVE: CVE-2023-42782
Published: 2023-10-10
Description: A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacker to send messages to the syslog server of FortiAnalyzer via the knoweldge of an authorized device serial number.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-345, CWE-345
References: https://fortiguard.com/psirt/FG-IR-23-221; https://fortiguard.com/psirt/FG-IR-23-221
CVE: CVE-2023-42787
Published: 2023-10-10
Description: A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 may allow a remote attacker with low privileges to access a privileged web console via client side code execution.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-602
References: https://fortiguard.com/psirt/FG-IR-23-187; https://github.com/orangecertcc/security-research/security/advisories/GHSA-q5pq-8666-j8fr; https://fortiguard.com/psirt/FG-IR-23-187
CVE: CVE-2023-42788
Published: 2023-10-10
Description: An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.8, version 6.4.0 through 6.4.12 and version 6.2.0 through 6.2.11 may allow a local attacker with low privileges to execute unauthorized code via specifically crafted arguments to a CLI command
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://fortiguard.com/psirt/FG-IR-23-167; https://github.com/orangecertcc/security-research/security/advisories/GHSA-qpv8-g6qv-rf8p; https://fortiguard.com/psirt/FG-IR-23-167
CVE: CVE-2023-44249
Published: 2023-10-10
Description: An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4.0 and before 7.2.3 allows a remote attacker with low privileges to read sensitive information via crafted HTTP requests.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://fortiguard.com/psirt/FG-IR-23-201; https://github.com/orangecertcc/security-research/security/advisories/GHSA-x8rp-jfwc-gqqj; https://fortiguard.com/psirt/FG-IR-23-201
CVE: CVE-2023-44399
Published: 2023-10-10
Description: ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. While this settings was properly working during the authentication process it did not work correctly on the password reset flow. This meant that even if this feature was active that an attacker could use the password reset function to verify if an account exist within ZITADEL. This bug has been patched in versions 2.37.3 and 2.38.0. No known workarounds are available.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-640
References: https://github.com/zitadel/zitadel/releases/tag/v2.37.3; https://github.com/zitadel/zitadel/releases/tag/v2.38.0; https://github.com/zitadel/zitadel/security/advisories/GHSA-v683-rcxx-vpff
CVE: CVE-2023-5495
Published: 2023-10-10
Description: A vulnerability was found in QDocs Smart School 6.4.1. It has been classified as critical. This affects an unknown part of the file /course/filterRecords/ of the component HTTP POST Request Handler. The manipulation of the argument searchdata[0][title]/searchdata[0][searchfield]/searchdata[0][searchvalue] leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-241647. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: http://packetstormsecurity.com/files/175071/Smart-School-6.4.1-SQL-Injection.html; https://vuldb.com/?ctiid.241647; https://vuldb.com/?id.241647
CVE: CVE-2023-5496
Published: 2023-10-10
Description: A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue affects some unknown processing of the component Select Text Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-241649 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.1 (LOW)
CWE: CWE-79
References: https://fastupload.io/en/G5tO8X1vM8ge4qJ/file; https://vuldb.com/?ctiid.241649; https://vuldb.com/?id.241649
CVE: CVE-2023-29348
Published: 2023-10-10
Description: Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29348; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29348
CVE: CVE-2023-35349
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35349; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35349
CVE: CVE-2023-36414
Published: 2023-10-10
Description: Azure Identity SDK Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36414; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36414
CVE: CVE-2023-36415
Published: 2023-10-10
Description: Azure Identity SDK Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36415; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36415
CVE: CVE-2023-36416
Published: 2023-10-10
Description: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36416; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36416
CVE: CVE-2023-36417
Published: 2023-10-10
Description: Microsoft SQL OLE DB Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36417; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36417
CVE: CVE-2023-36418
Published: 2023-10-10
Description: Azure RTOS GUIX Studio Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36418; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36418
CVE: CVE-2023-36419
Published: 2023-10-10
Description: Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-611
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36419; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36419
CVE: CVE-2023-36420
Published: 2023-10-10
Description: Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36420; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36420
CVE: CVE-2023-36429
Published: 2023-10-10
Description: Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-643, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36429; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36429
CVE: CVE-2023-36431
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36431; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36431
CVE: CVE-2023-36433
Published: 2023-10-10
Description: Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-643
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36433; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36433
CVE: CVE-2023-36434
Published: 2023-10-10
Description: Windows IIS Server Elevation of Privilege Vulnerability
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-307
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36434; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36434
CVE: CVE-2023-36435
Published: 2023-10-10
Description: Microsoft QUIC Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36435; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36435
CVE: CVE-2023-36436
Published: 2023-10-10
Description: Windows MSHTML Platform Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36436; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36436
CVE: CVE-2023-36438
Published: 2023-10-10
Description: Windows TCP/IP Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36438; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36438
CVE: CVE-2023-36557
Published: 2023-10-10
Description: PrintHTML API Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36557; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36557
CVE: CVE-2023-36561
Published: 2023-10-10
Description: Azure DevOps Server Elevation of Privilege Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36561; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36561
CVE: CVE-2023-36563
Published: 2023-10-10
Description: Microsoft WordPad Information Disclosure Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36563; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36563; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36563
CVE: CVE-2023-36564
Published: 2023-10-10
Description: Windows Search Security Feature Bypass Vulnerability
CVSS Score: 6.5 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36564; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36564
CVE: CVE-2023-36565
Published: 2023-10-10
Description: Microsoft Office Graphics Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36565; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36565
CVE: CVE-2023-36566
Published: 2023-10-10
Description: Microsoft Common Data Model SDK Denial of Service Vulnerability
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36566; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36566
CVE: CVE-2023-36567
Published: 2023-10-10
Description: Windows Deployment Services Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-908
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36567; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36567
CVE: CVE-2023-36568
Published: 2023-10-10
Description: Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVSS Score: 7.0 (HIGH)
CWE: CWE-59
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36568; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36568
CVE: CVE-2023-36569
Published: 2023-10-10
Description: Microsoft Office Elevation of Privilege Vulnerability
CVSS Score: 8.4 (HIGH)
CWE: CWE-269
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36569; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36569
CVE: CVE-2023-36570
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36570; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36570
CVE: CVE-2023-36571
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36571; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36571
CVE: CVE-2023-36572
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36572; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36572
CVE: CVE-2023-36573
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36573; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36573
CVE: CVE-2023-36574
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36574; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36574
CVE: CVE-2023-36575
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36575; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36575
CVE: CVE-2023-36576
Published: 2023-10-10
Description: Windows Kernel Information Disclosure Vulnerability
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36576; http://packetstormsecurity.com/files/175659/Windows-Kernel-Containerized-Registry-Escape.html; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36576
CVE: CVE-2023-36577
Published: 2023-10-10
Description: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
CVSS Score: 8.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36577; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36577
CVE: CVE-2023-36578
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36578; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36578
CVE: CVE-2023-36579
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36579; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36579
CVE: CVE-2023-36581
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-126
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36581; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36581
CVE: CVE-2023-36582
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36582; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36582
CVE: CVE-2023-36583
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36583; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36583
CVE: CVE-2023-36584
Published: 2023-10-10
Description: Windows Mark of the Web Security Feature Bypass Vulnerability
CVSS Score: 5.4 (MEDIUM)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36584; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36584; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-36584
CVE: CVE-2023-36585
Published: 2023-10-10
Description: Windows upnphost.dll Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36585; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36585
CVE: CVE-2023-36589
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36589; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36589
CVE: CVE-2023-36590
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36590; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36590
CVE: CVE-2023-36591
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36591; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36591
CVE: CVE-2023-36592
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36592; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36592
CVE: CVE-2023-36593
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36593; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36593
CVE: CVE-2023-36594
Published: 2023-10-10
Description: Windows Graphics Component Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36594; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36594
CVE: CVE-2023-36596
Published: 2023-10-10
Description: Remote Procedure Call Information Disclosure Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-822, CWE-668
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36596; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36596
CVE: CVE-2023-36598
Published: 2023-10-10
Description: Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36598; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36598
CVE: CVE-2023-36602
Published: 2023-10-10
Description: Windows TCP/IP Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36602; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36602
CVE: CVE-2023-36603
Published: 2023-10-10
Description: Windows TCP/IP Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36603; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36603
CVE: CVE-2023-36605
Published: 2023-10-10
Description: Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
CVSS Score: 7.4 (HIGH)
CWE: CWE-416
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36605; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36605
CVE: CVE-2023-36606
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36606; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36606
CVE: CVE-2023-36697
Published: 2023-10-10
Description: Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36697; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36697
CVE: CVE-2023-36698
Published: 2023-10-10
Description: Windows Kernel Security Feature Bypass Vulnerability
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-362
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36698; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36698
CVE: CVE-2023-36701
Published: 2023-10-10
Description: Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36701; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36701
CVE: CVE-2023-36702
Published: 2023-10-10
Description: Microsoft DirectMusic Remote Code Execution Vulnerability
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36702; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36702