CVE-2023-21xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
960 records · Page 4 of 10
- CVE-2023-21683: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Updated - CVE-2023-21682: Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability 5.3 Medium
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
Updated - CVE-2023-21681: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated Windows Win32k Elevation of Privilege Vulnerability
Updated- CVE-2023-21679: Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability 8.1 High
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
Updated Windows Print Spooler Elevation of Privilege Vulnerability
Updated- CVE-2023-21677: Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability 7.5 High
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
Updated Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
Updated- CVE-2023-21674: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 8.8 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Updated Improper Access to the VM resource manager can lead to Memory Corruption.
UpdatedMemory corruption in Audio while running concurrent tunnel playback or during concurrent audio tunnel recording sessions.
Updated- CVE-2023-21671: Improper Input Validation in Core 9.3 Critical
Memory Corruption in Core during syscall for Sectools Fuse comparison feature.
Updated Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode.
UpdatedInformation Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address.
UpdatedTransient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard.
UpdatedMemory Corruption in Graphics while accessing a buffer allocated through the graphics pool.
UpdatedMemory corruption in Graphics while importing a file.
UpdatedMemory Corruption in Core Platform while printing the response buffer in log.
Updated- CVE-2023-21663: Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display 6.7 Medium
Memory Corruption while accessing metadata in Display.
Updated Memory corruption in Core Platform while printing the response buffer in log.
UpdatedTransient DOS while parsing WLAN beacon or probe-response frame.
UpdatedTransient DOS in WLAN Firmware while parsing FT Information Elements.
UpdatedTransient DOS in WLAN Firmware while processing frames with missing header fields.
UpdatedTransient DOS in WLAN Firmware while processing the received beacon or probe response frame.
UpdatedMemoru corruption in Audio when ADSP sends input during record use case.
UpdatedMemory corruption in WLAN HOST while receiving an WMI event from firmware.
UpdatedMemory corruption in Audio while validating and mapping metadata.
Updated- CVE-2023-21654: Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio 6.7 Medium
Memory corruption in Audio during playback session with audio effects enabled.
Updated Transient DOS in Modem while processing RRC reconfiguration message.
UpdatedCryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use.
UpdatedMemory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
UpdatedMemory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length.
Updated- CVE-2023-21649: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN 6.7 Medium
Memory corruption in WLAN while running doDriverCmd for an unspecific command.
Updated Memory corruption in RIL while trying to send apdu packet.
UpdatedInformation disclosure in Bluetooth when an GATT packet is received due to improper input validation.
UpdatedTransient DOS in Modem while processing invalid System Information Block 1.
UpdatedMemory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request.
UpdatedMemory corruption due to untrusted pointer dereference in automotive during system call.
UpdatedMemory corruption in HAB Memory management due to broad system privileges via physical address.
UpdatedAn app with non-privileged access can change global system brightness and cause undesired system behavior.
UpdatedMemory corruption in Linux when the file upload API is called with parameters having large buffer.
UpdatedMemory corruption in Audio while processing sva_model_serializer using memory size passed by HIDL client.
UpdatedMemory corruption in Video while calling APIs with different instance ID than the one received in initialization.
Updated- CVE-2023-21637: Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux 6.7 Medium
Memory corruption in Linux while calling system configuration APIs.
Updated Memory Corruption due to improper validation of array index in Linux while updating adn record.
Updated- CVE-2023-21635: Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity 6.7 Medium
Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony.
Updated Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM.
Updated- CVE-2023-21633: Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux 6.7 Medium
Memory Corruption in Linux while processing QcRilRequestImsRegisterMultiIdentityMessage request.
Updated Memory corruption in Automotive GPU while querying a gsl memory node.
UpdatedWeak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network.
UpdatedMemory Corruption in Multimedia Framework due to integer overflow when synx bind is called along with synx signal.
Updated- CVE-2023-21629: Double Free in Modem 6.8 Medium
Memory Corruption in Modem due to double free while parsing the PKCS15 sim files.
Updated - CVE-2023-21628: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL 8.4 High
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
Updated Memory corruption in Trusted Execution Environment while calling service API with invalid address.
UpdatedCryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key.
UpdatedInformation disclosure in Network Services due to buffer over-read while the device receives DNS response.
UpdatedInformation disclosure in DSP Services while loading dynamic module.
UpdatedFrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21621: Adobe FrameMaker Improper Input Validation Remote Code Execution Vulnerability 7.8 High
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedFrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Substance 3D Designer version 12.4.1 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedExperience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
UpdatedExperience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Creation of Temporary File in Directory with Incorrect Permissions vulnerability that could result in privilege escalation in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21608: Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability 7.8 High
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21607: Adobe Acrobat Reader Improper Input Validation Remote Code Execution Vulnerability 7.8 High
Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Dimension version 3.4.6 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21601: Adobe Dimension OBJ File Parsing Use-After-Free Information Disclosure Vulnerability 5.5 Medium
Adobe Dimension version 3.4.6 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21599: Adobe InCopy Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 5.5 Medium
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21598: Adobe InCopy Font Parsing Use-After-Free Information Disclosure Vulnerability 5.5 Medium
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21597: Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21595: Adobe InCopy Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High
Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated Adobe InCopy versions 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21593: Adobe InDesign SVG file NULL Pointer Dereference Application denial-of-service 5.5 Medium
Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21592: Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 5.5 Medium
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21591: Adobe InDesign Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 5.5 Medium
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21590: Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21589: Adobe InDesign Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21588: Adobe InDesign Improper Input Validation Remote Code Execution Vulnerability 7.8 High
Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated Adobe InDesign version 18.0 (and earlier), 17.4 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a ma
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21584: Adobe FrameMaker Font Parsing Use-After-Free Information Disclosure Vulnerability 5.5 Medium
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21583: Adobe Bridge Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 5.5 Medium
Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated Adobe Digital Editions version 4.5.11.187303 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
UpdatedAdobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated- CVE-2023-21578: Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 5.5 Medium
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated - CVE-2023-21577: Adobe Photoshop Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability 5.5 Medium
Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Updated