Page 18 of 377 results (0.005 seconds)

CVSS: 6.7EPSS: 0%CPEs: 19EXPL: 0

08 Oct 2024 — Windows Resume Extensible Firmware Interface Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37976 • CWE-190: Integer Overflow or Wraparound •

CVSS: 9.4EPSS: 1%CPEs: 17EXPL: 0

08 Oct 2024 — Windows MSHTML Platform Spoofing Vulnerability Microsoft Windows MSHTML Platform contains an unspecified spoofing vulnerability which can lead to a loss of confidentiality. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.5EPSS: 0%CPEs: 15EXPL: 0

08 Oct 2024 — Windows Kernel-Mode Driver Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43554 • CWE-212: Improper Removal of Sensitive Information Before Storage or Transfer •

CVSS: 7.0EPSS: 0%CPEs: 24EXPL: 0

08 Oct 2024 — Windows Kernel-Mode Driver Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43535 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 24EXPL: 0

08 Oct 2024 — Windows Graphics Component Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43534 • CWE-125: Out-of-bounds Read •

CVSS: 9.0EPSS: 0%CPEs: 24EXPL: 2

08 Oct 2024 — Remote Registry Service Elevation of Privilege Vulnerability • https://github.com/HazeLook/CVE-2024-43532 • CWE-636: Not Failing Securely ('Failing Open') •

CVSS: 10.0EPSS: 0%CPEs: 24EXPL: 0

08 Oct 2024 — Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43519 • CWE-197: Numeric Truncation Error •

CVSS: 10.0EPSS: 0%CPEs: 24EXPL: 0

08 Oct 2024 — Windows Telephony Server Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43518 • CWE-122: Heap-based Buffer Overflow •

CVSS: 7.8EPSS: 0%CPEs: 24EXPL: 0

08 Oct 2024 — Internet Small Computer Systems Interface (iSCSI) Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43515 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 6.4EPSS: 0%CPEs: 17EXPL: 0

08 Oct 2024 — BitLocker Security Feature Bypass Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43513 • CWE-693: Protection Mechanism Failure •