CVSS: 8.1EPSS: 0%CPEs: 15EXPL: 0CVE-2023-36005 – Windows Telephony Server Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36005
Windows Telephony Server Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del servidor de telefonía de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36005 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •
CVSS: 7.5EPSS: 0%CPEs: 15EXPL: 0CVE-2023-36004 – Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2023-36004
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability Vulnerabilidad de suplantación de identidad DPAPI (interfaz de programación de aplicaciones de protección de datos) de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36004 • CWE-287: Improper Authentication •
CVSS: 7.3EPSS: 3%CPEs: 11EXPL: 2CVE-2023-36003 – XAML Diagnostics Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36003
XAML Diagnostics Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de diagnóstico XAML • https://github.com/m417z/CVE-2023-36003-POC https://github.com/baph0m3th/CVE-2023-36003 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36003 • CWE-426: Untrusted Search Path •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2023-21740 – Windows Media Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-21740
Windows Media Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Windows Media • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21740 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2023-36011 – Win32k Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36011
Win32k Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Win32k • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36011 • CWE-822: Untrusted Pointer Dereference •