Page 11 of 394 results (0.010 seconds)

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

09 Jul 2024 — SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21332 • CWE-416: Use After Free •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

09 Jul 2024 — SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38087 • CWE-415: Double Free •

CVSS: 10.0EPSS: 0%CPEs: 8EXPL: 0

09 Jul 2024 — SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38088 • CWE-122: Heap-based Buffer Overflow •

CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0

11 Jun 2024 — Azure Science Virtual Machine (DSVM) Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de Azure Science Virtual Machine (DSVM) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37325 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0

11 Jun 2024 — Azure Monitor Agent Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del agente de Azure Monitor • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35254 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0

11 Jun 2024 — Microsoft Azure File Sync Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de sincronización de archivos de Microsoft Azure • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35253 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

11 Jun 2024 — Azure Storage Movement Client Library Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de la librería cliente de movimiento de Azure Storage • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35252 • CWE-1104: Use of Unmaintained Third Party Components •

CVSS: 5.5EPSS: 0%CPEs: 9EXPL: 0

11 Jun 2024 — Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en las librerías de identidad de Azure y la librería de autenticación de Microsoft A flaw was found in Microsoft's Azure Identity Libraries and the Microsoft Authentication Library (MSAL). The flaw arises from a race condition—a scenario where the timing of events leads to unexpected behavior—during concurrent operations on shared resources. This can result in privile... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35255 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

16 May 2024 — Azure Monitor Agent Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de Azure Monitor Agent • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30060 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •

CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 0

14 May 2024 — Azure Migrate Cross-Site Scripting Vulnerability Vulnerabilidad de Cross Site Scripting de Azure Migrate • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30053 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •