CVSS: 8.8EPSS: 1%CPEs: 13EXPL: 0CVE-2023-36577 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36577
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36577 • CWE-122: Heap-based Buffer Overflow •
CVSS: 5.4EPSS: 0%CPEs: 23EXPL: 0CVE-2023-36584 – Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2023-36584
Windows Mark of the Web Security Feature Bypass Vulnerability Vulnerabilidad de omisión de característica de seguridad web en Windows Mark Microsoft Windows Mark of the Web (MOTW) contains a security feature bypass vulnerability resulting in a limited loss of integrity and availability of security features. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36584 •
CVSS: 7.5EPSS: 0%CPEs: 23EXPL: 0CVE-2023-36585 – Windows upnphost.dll Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-36585
Windows upnphost.dll Denial of Service Vulnerability Vulnerabilidad de denegación de servicio en Active Template Library • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36585 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0CVE-2023-36594 – Windows Graphics Component Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36594
Windows Graphics Component Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Windows Graphics Component This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple active monitors. The specific flaw exists within the UMPDDrvPlgBlt function in the win32kfull driver. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36594 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.5EPSS: 2%CPEs: 20EXPL: 0CVE-2023-36596 – Remote Procedure Call Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-36596
Remote Procedure Call Information Disclosure Vulnerability Vulnerabilidad de divulgación de información en Remote Procedure Call • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36596 • CWE-668: Exposure of Resource to Wrong Sphere CWE-822: Untrusted Pointer Dereference •