CVSS: 7.5EPSS: 0%CPEs: 15EXPL: 0CVE-2023-36004 – Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability
https://notcve.org/view.php?id=CVE-2023-36004
Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability Vulnerabilidad de suplantación de identidad DPAPI (interfaz de programación de aplicaciones de protección de datos) de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36004 • CWE-287: Improper Authentication •
CVSS: 7.3EPSS: 3%CPEs: 11EXPL: 2CVE-2023-36003 – XAML Diagnostics Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36003
XAML Diagnostics Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de diagnóstico XAML • https://github.com/m417z/CVE-2023-36003-POC https://github.com/baph0m3th/CVE-2023-36003 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36003 • CWE-426: Untrusted Search Path •
CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0CVE-2023-21740 – Windows Media Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-21740
Windows Media Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Windows Media • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21740 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.8EPSS: 0%CPEs: 13EXPL: 0CVE-2023-36011 – Win32k Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36011
Win32k Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Win32k • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36011 • CWE-822: Untrusted Pointer Dereference •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2023-36391 – Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36391
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del servicio del subsistema de autoridad de seguridad local • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36391 • CWE-59: Improper Link Resolution Before File Access ('Link Following') •