CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0CVE-2023-36696 – Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36696
12 Dec 2023 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del controlador del minifiltro de archivos en la nube de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36696 • CWE-125: Out-of-bounds Read •
CVSS: 6.8EPSS: 0%CPEs: 10EXPL: 0CVE-2023-24023 – kernel: Bluetooth Forward and Future Secrecy Attacks and Defenses
https://notcve.org/view.php?id=CVE-2023-24023
28 Nov 2023 — Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS. Los dispositivos Bluetooth BR/EDR con emparejamiento simple seguro y emparejamiento de conexiones seguras en las especificaciones principales de Bluetooth 4.2 a 5.4 permiten ciertos ataques de intermediario que fuerzan una longi... • https://dl.acm.org/doi/10.1145/3576915.3623066 • CWE-300: Channel Accessible by Non-Endpoint •
CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 0CVE-2023-36033 – Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2023-36033
14 Nov 2023 — Windows DWM Core Library Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de la biblioteca principal de Windows DWM. Microsoft Windows Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36033 • CWE-822: Untrusted Pointer Dereference •
CVSS: 10.0EPSS: 40%CPEs: 22EXPL: 0CVE-2023-36028 – Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36028
14 Nov 2023 — Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Protected Extensible Authentication Protocol (PEAP). • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36028 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 17EXPL: 0CVE-2023-36047 – Windows Authentication Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36047
14 Nov 2023 — Windows Authentication Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de Windows Authentication. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36047 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.8EPSS: 0%CPEs: 26EXPL: 0CVE-2023-36393 – Windows User Interface Application Core Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36393
14 Nov 2023 — Windows User Interface Application Core Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Windows User Interface Application Core. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36393 • CWE-426: Untrusted Search Path •
CVSS: 7.0EPSS: 0%CPEs: 18EXPL: 0CVE-2023-36394 – Windows Search Service Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36394
14 Nov 2023 — Windows Search Service Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de Windows Search Service. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36394 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 10.0EPSS: 1%CPEs: 26EXPL: 0CVE-2023-36397 – Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36397
14 Nov 2023 — Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Pragmatic General Multicast (PGM) de Windows. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36397 • CWE-126: Buffer Over-read •
CVSS: 6.5EPSS: 0%CPEs: 24EXPL: 0CVE-2023-36398 – Windows NTFS Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-36398
14 Nov 2023 — Windows NTFS Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Windows NTFS. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36398 • CWE-908: Use of Uninitialized Resource •
CVSS: 8.8EPSS: 0%CPEs: 22EXPL: 0CVE-2023-36400 – Windows HMAC Key Derivation Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36400
14 Nov 2023 — Windows HMAC Key Derivation Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de derivación de clave HMAC de Windows. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36400 • CWE-122: Heap-based Buffer Overflow •