CVSS: 7.8EPSS: 0%CPEs: 16EXPL: 0CVE-2023-36593 – Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36593
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código en Microsoft Message Queuing • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36593 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0CVE-2023-36594 – Windows Graphics Component Elevation of Privilege Vulnerability
https://notcve.org/view.php?id=CVE-2023-36594
Windows Graphics Component Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Windows Graphics Component This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. Additionally, the target system must have multiple active monitors. The specific flaw exists within the UMPDDrvPlgBlt function in the win32kfull driver. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36594 • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •
CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0CVE-2023-36598 – Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2023-36598
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código en Microsoft WDAC ODBC Driver • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36598 • CWE-122: Heap-based Buffer Overflow •
CVSS: 7.5EPSS: 0%CPEs: 25EXPL: 0CVE-2023-36602 – Windows TCP/IP Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-36602
Windows TCP/IP Denial of Service Vulnerability Vulnerabilidad de denegación de servicio en TCP/IP de Windows • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36602 • CWE-476: NULL Pointer Dereference •
CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0CVE-2023-36606 – Microsoft Message Queuing Denial of Service Vulnerability
https://notcve.org/view.php?id=CVE-2023-36606
Microsoft Message Queuing Denial of Service Vulnerability Vulnerabilidad de denegación de servicio en Microsoft Message Queuing • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36606 • CWE-400: Uncontrolled Resource Consumption •