CVSS: 7.0EPSS: 0%CPEs: 20EXPL: 0CVE-2023-36403 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36403
Windows Kernel Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del kernel de Windows. The Microsoft Windows Kernel has an issue with bad locking in registry virtualization that can result in race conditions. • http://packetstormsecurity.com/files/176209/Windows-Kernel-Race-Conditions.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36403 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •
CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 0CVE-2023-36404 – Windows Kernel Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-36404
Windows Kernel Information Disclosure Vulnerability Vulnerabilidad de divulgación de información del kernel de Windows. The Microsoft Windows Kernel has a time-of-check / time-of-use issue in verifying layered key security which may lead to information disclosure from privileged registry keys. • http://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36404 • CWE-284: Improper Access Control •
CVSS: 7.0EPSS: 0%CPEs: 14EXPL: 0CVE-2023-36405 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36405
Windows Kernel Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del kernel de Windows. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36405 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 0%CPEs: 11EXPL: 0CVE-2023-36408 – Windows Hyper-V Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36408
Windows Hyper-V Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de Windows Hyper-V. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36408 • CWE-122: Heap-based Buffer Overflow •
CVSS: 8.8EPSS: 0%CPEs: 25EXPL: 0CVE-2023-36017 – Windows Scripting Engine Memory Corruption Vulnerability
https://notcve.org/view.php?id=CVE-2023-36017
Windows Scripting Engine Memory Corruption Vulnerability Vulnerabilidad de corrupción de memoria del motor de secuencias de comandos de Windows. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36017 • CWE-787: Out-of-bounds Write CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •