CVSS: 8.8EPSS: 0%CPEs: 22EXPL: 0CVE-2023-36400 – Windows HMAC Key Derivation Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36400
Windows HMAC Key Derivation Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios de derivación de clave HMAC de Windows. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36400 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.2EPSS: 0%CPEs: 26EXPL: 0CVE-2023-36401 – Microsoft Remote Registry Service Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36401
Microsoft Remote Registry Service Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código del servicio de registro remoto de Microsoft. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36401 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 6%CPEs: 26EXPL: 0CVE-2023-36402 – Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36402
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Proveedor Microsoft WDAC OLE DB para la vulnerabilidad de ejecución remota de código de SQL Server. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36402 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.0EPSS: 0%CPEs: 20EXPL: 0CVE-2023-36403 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36403
Windows Kernel Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios del kernel de Windows. The Microsoft Windows Kernel has an issue with bad locking in registry virtualization that can result in race conditions. • http://packetstormsecurity.com/files/176209/Windows-Kernel-Race-Conditions.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36403 • CWE-591: Sensitive Data Storage in Improperly Locked Memory •
CVSS: 5.5EPSS: 0%CPEs: 14EXPL: 0CVE-2023-36404 – Windows Kernel Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2023-36404
Windows Kernel Information Disclosure Vulnerability Vulnerabilidad de divulgación de información del kernel de Windows. The Microsoft Windows Kernel has a time-of-check / time-of-use issue in verifying layered key security which may lead to information disclosure from privileged registry keys. • http://packetstormsecurity.com/files/176110/Windows-Kernel-Information-Disclosure.html https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36404 • CWE-284: Improper Access Control •