Page 20 of 271 results (0.049 seconds)

CVSS: 4.7EPSS: 0%CPEs: 17EXPL: 0

10 Jan 2023 — Event Tracing for Windows Information Disclosure Vulnerability Vulnerabilidad de divulgación de información en Event Tracing para Windows. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21536 • CWE-125: Out-of-bounds Read CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-668: Exposure of Resource to Wrong Sphere •

CVSS: 7.8EPSS: 0%CPEs: 30EXPL: 1

10 Jan 2023 — Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de Microsoft Message Queuing (MSMQ) • https://github.com/stevenjoezhang/CVE-2023-21537 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •

CVSS: 7.5EPSS: 0%CPEs: 14EXPL: 0

10 Jan 2023 — Windows Authentication Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de autenticación de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21539 • CWE-125: Out-of-bounds Read •

CVSS: 5.5EPSS: 1%CPEs: 17EXPL: 0

10 Jan 2023 — Windows Cryptographic Information Disclosure Vulnerability Vulnerabilidad de divulgación de información criptográfica de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21540 • CWE-20: Improper Input Validation •

CVSS: 7.8EPSS: 0%CPEs: 31EXPL: 0

10 Jan 2023 — Windows Task Scheduler Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21541 •

CVSS: 8.1EPSS: 1%CPEs: 31EXPL: 0

10 Jan 2023 — Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21543 • CWE-400: Uncontrolled Resource Consumption •

CVSS: 8.1EPSS: 0%CPEs: 31EXPL: 0

10 Jan 2023 — Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del protocolo de túnel de capa 2 de Windows (L2TP) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21546 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CWE-591: Sensitive Data Storage in Improperly Locked Memory •

CVSS: 8.1EPSS: 0%CPEs: 31EXPL: 0

10 Jan 2023 — Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del protocolo de túnel de socket seguro (SSTP) de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21548 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •

CVSS: 9.0EPSS: 2%CPEs: 26EXPL: 0

10 Jan 2023 — Windows SMB Witness Service Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del servicio testigo de SMB de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21549 • CWE-269: Improper Privilege Management CWE-285: Improper Authorization •

CVSS: 5.5EPSS: 1%CPEs: 17EXPL: 0

10 Jan 2023 — Windows Cryptographic Information Disclosure Vulnerability Vulnerabilidad de divulgación de información criptográfica de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21550 • CWE-20: Improper Input Validation •