CVE-2023-23399

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 2.5% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Excel Office and 3 more

CVE-2023-23394

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 18 more

CVE-2023-23393

Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability

Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 20h2 Windows 10 20h2 and 10 more

CVE-2023-23392

HTTP Protocol Stack Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 11 21h2 Windows 11 21h2 Windows 11 22h2 and 2 more

CVE-2023-23389

Microsoft Defender Elevation of Privilege Vulnerability

Microsoft Defender Elevation of Privilege Vulnerability

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Malware Protection Engine

CVE-2023-23388

Windows Bluetooth Driver Elevation of Privilege Vulnerability

Windows Bluetooth Driver Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 13 more

CVE-2023-23385

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 18 more

CVE-2023-23383

Service Fabric Explorer Spoofing Vulnerability

Service Fabric Explorer Spoofing Vulnerability

CVSS 3.1 · 8.2 High EPSS 11.7% KEV · Not listed

Vendors

Microsoft

Products

Azure Service Fabric

CVE-2023-28303

Windows Snipping Tool Information Disclosure Vulnerability

Windows Snipping Tool Information Disclosure Vulnerability

CVSS 3.1 · 3.3 Low EPSS 2.0% KEV · Not listed

Vendors

Microsoft

Products

Snip \& Sketch Snip And Sketch Snipping Tool

CVE-2023-21721

Microsoft OneNote Elevation of Privilege Vulnerability

Microsoft OneNote Elevation of Privilege Vulnerability

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Onenote Onenote For Android

CVE-2023-23390

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

3d Builder

CVE-2023-23381

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Visual Studio Visual Studio 2017 Visual Studio 2019 and 1 more

CVE-2023-23377

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

3d Builder

CVE-2023-21564

Azure DevOps Server Cross-Site Scripting Vulnerability

Azure DevOps Server Cross-Site Scripting Vulnerability

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Azure Devops Server

CVE-2023-21722

.NET Framework Denial of Service Vulnerability

.NET Framework Denial of Service Vulnerability

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

.net .net Framework Windows 10 1507 and 20 more

CVE-2023-21714

Microsoft Office Information Disclosure Vulnerability

Microsoft Office Information Disclosure Vulnerability

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

365 Apps Office Long Term Servicing Channel

CVE-2023-21703

Azure Data Box Gateway Remote Code Execution Vulnerability

Azure Data Box Gateway Remote Code Execution Vulnerability

CVSS 3.1 · 6.5 Medium EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Azure Data Box Azure Data Box Gateway Azure Stack Edge

CVE-2023-21702

Windows iSCSI Service Denial of Service Vulnerability

Windows iSCSI Service Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2023-21700

Windows iSCSI Discovery Service Denial of Service Vulnerability

Windows iSCSI Discovery Service Denial of Service Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2023-21699

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability

CVSS 3.1 · 5.3 Medium EPSS 1.1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 14 more