Page 14 of 619 results (0.004 seconds)

CVSS: 5.5EPSS: 0%CPEs: 16EXPL: 0

09 Jan 2024 — Windows Cryptographic Services Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de servicios criptográficos de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21311 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 8EXPL: 0

09 Jan 2024 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del controlador del minifiltro de archivos en la nube de Windows This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Only systems with long Win32 path support enabled are affected. The specific flaw... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21310 • CWE-197: Numeric Truncation Error •

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

09 Jan 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del controlador en modo kernel de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21309 • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVSS: 6.1EPSS: 0%CPEs: 7EXPL: 3

09 Jan 2024 — Microsoft Bluetooth Driver Spoofing Vulnerability Vulnerabilidad de suplantación de controladores Bluetooth de Microsoft • https://github.com/PhucHauDeveloper/BadBlue • CWE-306: Missing Authentication for Critical Function •

CVSS: 6.8EPSS: 0%CPEs: 16EXPL: 0

09 Jan 2024 — Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability Vulnerabilidad de divulgación de información del servicio del subsistema de la autoridad de seguridad local de Microsoft • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20692 • CWE-326: Inadequate Encryption Strength CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0

09 Jan 2024 — Microsoft AllJoyn API Denial of Service Vulnerability Vulnerabilidad de denegación de servicio de la API Microsoft AllJoyn • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20687 • CWE-125: Out-of-bounds Read •

CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0

09 Jan 2024 — Windows Subsystem for Linux Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del subsistema de Windows para Linux • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20681 • CWE-416: Use After Free •

CVSS: 7.7EPSS: 0%CPEs: 10EXPL: 0

09 Jan 2024 — Windows Server Key Distribution Service Security Feature Bypass Omisión de la función de seguridad del servicio de distribución de claves de Windows Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21316 • CWE-20: Improper Input Validation •

CVSS: 6.8EPSS: 0%CPEs: 22EXPL: 0

09 Jan 2024 — Microsoft Message Queuing Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Message Queue Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20664 • CWE-822: Untrusted Pointer Dereference •

CVSS: 6.8EPSS: 0%CPEs: 22EXPL: 0

09 Jan 2024 — Windows Message Queuing Client (MSMQC) Information Disclosure Divulgación de información de Message Queuing Client (MSMQC) de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20663 • CWE-822: Untrusted Pointer Dereference •