CVSS: 8.8EPSS: 2%CPEs: 10EXPL: 2CVE-2023-29360 – Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
https://notcve.org/view.php?id=CVE-2023-29360
13 Jun 2023 — Microsoft Streaming Service Elevation of Privilege Vulnerability This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the mskssrv driver. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this ... • https://github.com/0xDivyanshu-new/CVE-2023-29360 • CWE-822: Untrusted Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 0CVE-2023-29359 – GDI Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-29359
13 Jun 2023 — GDI Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29359 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 0CVE-2023-29358 – Windows GDI Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-29358
13 Jun 2023 — Windows GDI Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29358 • CWE-416: Use After Free •
CVSS: 8.5EPSS: 0%CPEs: 25EXPL: 0CVE-2023-29351 – Windows Group Policy Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-29351
13 Jun 2023 — Windows Group Policy Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29351 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •
CVSS: 7.8EPSS: 0%CPEs: 25EXPL: 0CVE-2023-29346 – NTFS Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-29346
13 Jun 2023 — NTFS Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29346 • CWE-681: Incorrect Conversion between Numeric Types •
CVSS: 6.8EPSS: 0%CPEs: 27EXPL: 0CVE-2022-35759 – Windows Local Security Authority (LSA) Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2022-35759
31 May 2023 — Windows Local Security Authority (LSA) Denial of Service Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35759 •
CVSS: 5.5EPSS: 0%CPEs: 27EXPL: 0CVE-2022-35758 – Windows Kernel Memory Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2022-35758
31 May 2023 — Windows Kernel Memory Information Disclosure Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35758 •
CVSS: 7.3EPSS: 0%CPEs: 23EXPL: 0CVE-2022-35755 – Windows Print Spooler Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-35755
31 May 2023 — Windows Print Spooler Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35755 •
CVSS: 6.7EPSS: 0%CPEs: 24EXPL: 0CVE-2022-35754 – Unified Write Filter Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2022-35754
31 May 2023 — Unified Write Filter Elevation of Privilege Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35754 •
CVSS: 8.1EPSS: 0%CPEs: 27EXPL: 0CVE-2022-35753 – Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2022-35753
31 May 2023 — Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35753 •