CVSS: 8.8EPSS: 0%CPEs: 4EXPL: 0CVE-2023-38148 – Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-38148
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability Vulnerabilidad de Ejecución Remota de Código en Internet Connection Sharing (ICS) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38148 • CWE-121: Stack-based Buffer Overflow •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2023-38149 – Windows TCP/IP Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-38149
Windows TCP/IP Denial of Service Vulnerability Vulnerabilidad de Denegación de Servicio TCP/IP de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38149 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2023-38150 – Windows Kernel Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-38150
Windows Kernel Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios del Kernel de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38150 • CWE-190: Integer Overflow or Wraparound •
CVSS: 8.8EPSS: 0%CPEs: 16EXPL: 0CVE-2023-38161 – Windows GDI Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-38161
Windows GDI Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios de Windows GDI This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the win32kfull driver. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38161 • CWE-416: Use After Free •
CVSS: 7.8EPSS: 0%CPEs: 7EXPL: 0CVE-2023-35355 – Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-35355
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Vulnerabilidad de Elevación de Privilegios del Controlador del Minifiltro de Achivos en la Nube de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35355 • CWE-121: Stack-based Buffer Overflow •