Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 28847 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-38176 1 Microsoft 1 Azure Arc-enabled Servers 2026-11-10 N/A 7.0 HIGH
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
CVE-2023-36912 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-38175 1 Microsoft 1 Windows Defender 2026-11-10 N/A 7.8 HIGH
Microsoft Windows Defender Elevation of Privilege Vulnerability
CVE-2023-38180 2 Fedoraproject, Microsoft 4 Fedora, .net, Asp.net Core and 1 more 2026-11-10 N/A 7.5 HIGH
.NET and Visual Studio Denial of Service Vulnerability
CVE-2023-38154 1 Microsoft 2 Windows 10 1809, Windows Server 2019 2026-11-10 N/A 7.8 HIGH
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-38167 1 Microsoft 1 Dynamics 365 Business Central 2026-11-10 N/A 7.2 HIGH
Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability
CVE-2023-36910 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 9.8 CRITICAL
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-36906 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 5.5 MEDIUM
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2023-38170 1 Microsoft 1 Hevc Video Extensions 2026-11-10 N/A 7.8 HIGH
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2023-38178 1 Microsoft 2 .net, Visual Studio 2022 2026-11-10 N/A 7.5 HIGH
.NET Core and Visual Studio Denial of Service Vulnerability
CVE-2023-36907 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 5.5 MEDIUM
Windows Cryptographic Services Information Disclosure Vulnerability
CVE-2023-38188 1 Microsoft 1 Azure Hdinsight 2026-11-10 N/A 4.5 MEDIUM
Azure Apache Hadoop Spoofing Vulnerability
CVE-2023-36909 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 6.5 MEDIUM
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-38172 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 7.5 HIGH
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
CVE-2023-36913 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2026-11-10 N/A 6.5 MEDIUM
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2023-2110 4 Apple, Linux, Microsoft and 1 more 4 Macos, Linux Kernel, Windows and 1 more 2026-11-10 N/A 8.2 HIGH
Improper path handling in Obsidian desktop before 1.2.8 on Windows, Linux and macOS allows a crafted webpage to access local files and exfiltrate them to remote web servers via "app://local/<absolute-path>". This vulnerability can be exploited if a user opens a malicious markdown file in Obsidian, or copies text from a malicious webpage and paste it into Obsidian.
CVE-2022-4146 4 Hitachi, Linux, Microsoft and 1 more 4 Replication Manager, Linux Kernel, Windows and 1 more 2026-11-10 N/A 7.3 HIGH
Expression Language Injection vulnerability in Hitachi Replication Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Replication Manager: before 8.8.5-02.
CVE-2023-33850 4 Hp, Ibm, Linux and 1 more 6 Hp-ux, Aix, Cics Tx and 3 more 2026-11-10 N/A 7.5 HIGH
IBM GSKit-Crypto could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information.
CVE-2023-36741 1 Microsoft 1 Edge Chromium 2026-11-10 N/A 8.3 HIGH
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2026-100126 3 Adobe, Apple, Microsoft 3 Bridge, Macos, Windows 2026-11-09 N/A 5.5 MEDIUM
Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious file.