CVE-2023-24xxx records

Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.

698 records · Page 1 of 7

• CVE-2023-24999: Vault Fails to Verify if the AppRole SecretID Belongs to Role During a Destroy Operation 4.4 Medium

  HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle destroy endpoint to destroy the secret ID of any other role by providing the secret ID accessor. This vulnerability is fixed in Vault 1.13.0, 1.12.4, 1.11.8, 1.10.11 and above.

  Updated 2025-03-03
• CVE-2023-24998: Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High

  Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new configuration option (FileUploadBase#setFileCountMax) is not enabled by default and must be explicitly configured.

  Updated 2026-10-07
• CVE-2023-24997: Apache InLong: Jdbc Connection Security Bypass 9.8 Critical

  Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7223 https://github.com/apache/inlong/pull/7223  to solve it.

  Updated 2025-03-26
• CVE-2023-24996: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19818)

  Updated 2025-03-19
• CVE-2023-24995: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19817)

  Updated 2025-03-19
• CVE-2023-24994: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19816)

  Updated 2025-03-19
• CVE-2023-24993: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19815)

  Updated 2025-03-20
• CVE-2023-24992: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19814)

  Updated 2025-03-18
• CVE-2023-24991: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19813)

  Updated 2025-03-19
• CVE-2023-24990: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19812)

  Updated 2025-03-19
• CVE-2023-24989: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19811)

  Updated 2025-03-19
• CVE-2023-24988: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19810)

  Updated 2025-03-19
• CVE-2023-24987: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19809)

  Updated 2025-03-19
• CVE-2023-24986: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19808)

  Updated 2025-03-19
• CVE-2023-24985: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19807)

  Updated 2025-03-20
• CVE-2023-24984: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19806)

  Updated 2025-03-20
• CVE-2023-24983: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19805)

  Updated 2025-03-20
• CVE-2023-24982: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19804)

  Updated 2025-03-20
• CVE-2023-24981: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19791)

  Updated 2025-03-20
• CVE-2023-24980: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19790)

  Updated 2025-03-19
• CVE-2023-24979: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocate 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19789)

  Updated 2025-03-20
• CVE-2023-24978: A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing 7.8 High

  A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer access while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19788)

  Updated 2025-03-20
• CVE-2023-24977: Apache InLong: Jdbc Connection causes arbitrary file reading in InLong 7.5 High

  Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are advised to upgrade to Apache InLong's latest version or cherry-pick https://github.com/apache/inlong/pull/7214 https://github.com/apache/inlong/pull/7214  to solve it.

  Updated 2025-03-27
• CVE-2023-24975: IBM Spectrum Symphony HOST header injection 5.4 Medium

  IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 247030.

  Updated 2025-03-05
• CVE-2023-24971: IBM B2B Advanced Communication denial of service 7.5 High

  IBM B2B Advanced Communications 1.0.0.0 and IBM Multi-Enterprise Integration Gateway 1.0.0.1 could allow a user to cause a denial of service due to the deserializing of untrusted serialized Java objects. IBM X-Force ID: 246976.

  Updated 2024-10-18
• CVE-2023-24966: IBM WebSphere Application Server cross-site scripting 6.1 Medium

  IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 246904.

  Updated 2025-01-30
• CVE-2023-24965: IBM Aspera Faspex improper access control 5.8 Medium

  IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM X-Force ID: 246713.

  Updated 2024-09-26
• CVE-2023-24964: IBM InfoSphere Information Server information disclosure 6.2 Medium

  IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463.

  Updated 2025-03-12
• CVE-2023-24960: IBM InfoSphere Information Server information disclosure 7.5 High

  IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246333

  Updated 2025-03-12
• CVE-2023-24959: IBM InfoSphere Information Server information disclosure 5.3 Medium

  IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332.

  Updated 2024-09-30
• CVE-2023-24958: IBM TS7700 Management Interface command injection 8.8 High

  A vulnerability in the IBM TS7700 Management Interface 8.51.2.12, 8.52.200.111, 8.52.102.13, and 8.53.0.63 could allow an authenticated user to submit a specially crafted URL leading to privilege escalation and remote code execution. IBM X-Force ID: 246320.

  Updated 2025-01-29
• CVE-2023-24957: IBM Business Automation Workflow cross-site scripting 5.4 Medium

  IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, 19.0.0.2, 19.0.0.3, 20.0.0.1, 20.0.0.2, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 2

  Updated 2025-01-29
• CVE-2023-24956: Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php. 8.8 High

  Forget Heart Message Box v1.1 was discovered to contain a SQL injection vulnerability via the name parameter at /cha.php.

  Updated 2025-03-27
• CVE-2023-24955: Microsoft SharePoint Server Remote Code Execution Vulnerability 7.2 High

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Updated 2025-10-21
• CVE-2023-24954: Microsoft SharePoint Server Information Disclosure Vulnerability 6.5 Medium

  Microsoft SharePoint Server Information Disclosure Vulnerability

  Updated 2025-07-10
• CVE-2023-24953: Microsoft Excel Remote Code Execution Vulnerability 7.8 High

  Microsoft Excel Remote Code Execution Vulnerability

  Updated 2025-07-10
• CVE-2023-24950: Microsoft SharePoint Server Spoofing Vulnerability 6.5 Medium

  Microsoft SharePoint Server Spoofing Vulnerability

  Updated 2025-07-10
• CVE-2023-24949: Windows Kernel Elevation of Privilege Vulnerability 7.8 High

  Windows Kernel Elevation of Privilege Vulnerability

  Updated 2025-07-10
• CVE-2023-24948: Windows Bluetooth Driver Elevation of Privilege Vulnerability 7.4 High

  Windows Bluetooth Driver Elevation of Privilege Vulnerability

  Updated 2025-07-10
• CVE-2023-24947: Windows Bluetooth Driver Remote Code Execution Vulnerability 8.8 High

  Windows Bluetooth Driver Remote Code Execution Vulnerability

  Updated 2025-07-10
• CVE-2023-24946: Windows Backup Service Elevation of Privilege Vulnerability 7.8 High

  Windows Backup Service Elevation of Privilege Vulnerability

  Updated 2025-07-10
• CVE-2023-24945: Windows iSCSI Target Service Information Disclosure Vulnerability 5.5 Medium

  Windows iSCSI Target Service Information Disclosure Vulnerability

  Updated 2025-07-10
• CVE-2023-24944: Windows Bluetooth Driver Information Disclosure Vulnerability 6.5 Medium

  Windows Bluetooth Driver Information Disclosure Vulnerability

  Updated 2025-07-10
• CVE-2023-24943: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 9.8 Critical

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Updated 2025-07-10
• CVE-2023-24942: Remote Procedure Call Runtime Denial of Service Vulnerability 7.5 High

  Remote Procedure Call Runtime Denial of Service Vulnerability

  Updated 2025-07-10
• CVE-2023-24941: Windows Network File System Remote Code Execution Vulnerability 9.8 Critical

  Windows Network File System Remote Code Execution Vulnerability

  Updated 2025-07-10
• CVE-2023-24940: Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability 7.5 High

  Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

  Updated 2025-07-10
• CVE-2023-24939: Server for NFS Denial of Service Vulnerability 7.5 High

  Server for NFS Denial of Service Vulnerability

  Updated 2025-07-10
• CVE-2023-24938: Windows CryptoAPI Denial of Service Vulnerability 6.5 Medium

  Windows CryptoAPI Denial of Service Vulnerability

  Updated 2025-01-01
• CVE-2023-24937: Windows CryptoAPI Denial of Service Vulnerability 6.5 Medium

  Windows CryptoAPI Denial of Service Vulnerability

  Updated 2025-01-01
• CVE-2023-24936: .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability 7.5 High

  .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

  Updated 2025-01-01
• CVE-2023-24935: Microsoft Edge (Chromium-based) Spoofing Vulnerability 6.1 Medium

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Updated 2025-02-28
• CVE-2023-24934: Microsoft Defender Security Feature Bypass Vulnerability 6.2 Medium

  Microsoft Defender Security Feature Bypass Vulnerability

  Updated 2025-01-23
• CVE-2023-24932: Secure Boot Security Feature Bypass Vulnerability 6.7 Medium

  Secure Boot Security Feature Bypass Vulnerability

  Updated 2025-07-10
• CVE-2023-24931: Windows Secure Channel Denial of Service Vulnerability 7.5 High

  Windows Secure Channel Denial of Service Vulnerability

  Updated 2025-01-23
• CVE-2023-24930: Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability 7.8 High

  Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

  Updated 2025-02-28
• CVE-2023-24929: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24928: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24927: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24926: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24925: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24924: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24923: Microsoft OneDrive for Android Information Disclosure Vulnerability 5.5 Medium

  Microsoft OneDrive for Android Information Disclosure Vulnerability

  Updated 2025-02-28
• CVE-2023-24922: Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability 6.5 Medium

  Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

  Updated 2025-01-01
• CVE-2023-24921: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 5.4 Medium

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2025-02-28
• CVE-2023-24920: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 5.4 Medium

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2025-02-28
• CVE-2023-24919: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 5.4 Medium

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2025-02-28
• CVE-2023-24914: Win32k Elevation of Privilege Vulnerability 7.0 High

  Win32k Elevation of Privilege Vulnerability

  Updated 2025-01-23
• CVE-2023-24913: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24912: Windows Graphics Component Elevation of Privilege Vulnerability 7.8 High

  Windows Graphics Component Elevation of Privilege Vulnerability

  Updated 2025-01-23
• CVE-2023-24911: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability 4.3 Medium

  Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  Updated 2025-02-28
• CVE-2023-24910: Windows Graphics Component Elevation of Privilege Vulnerability 7.8 High

  Windows Graphics Component Elevation of Privilege Vulnerability

  Updated 2025-01-01
• CVE-2023-24909: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24908: Remote Procedure Call Runtime Remote Code Execution Vulnerability 8.1 High

  Remote Procedure Call Runtime Remote Code Execution Vulnerability

  Updated 2025-01-01
• CVE-2023-24907: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24906: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability 6.5 Medium

  Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  Updated 2025-02-28
• CVE-2023-24905: Remote Desktop Client Remote Code Execution Vulnerability 7.8 High

  Remote Desktop Client Remote Code Execution Vulnerability

  Updated 2025-07-10
• CVE-2023-24904: Windows Installer Elevation of Privilege Vulnerability 7.1 High

  Windows Installer Elevation of Privilege Vulnerability

  Updated 2025-07-10
• CVE-2023-24903: Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability 8.1 High

  Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

  Updated 2025-07-10
• CVE-2023-24902: Win32k Elevation of Privilege Vulnerability 7.8 High

  Win32k Elevation of Privilege Vulnerability

  Updated 2025-07-10
• CVE-2023-24901: Windows NFS Portmapper Information Disclosure Vulnerability 7.5 High

  Windows NFS Portmapper Information Disclosure Vulnerability

  Updated 2025-07-10
• CVE-2023-24900: Windows NTLM Security Support Provider Information Disclosure Vulnerability 5.9 Medium

  Windows NTLM Security Support Provider Information Disclosure Vulnerability

  Updated 2025-07-10
• CVE-2023-24899: Windows Graphics Component Elevation of Privilege Vulnerability 7.0 High

  Windows Graphics Component Elevation of Privilege Vulnerability

  Updated 2025-07-10
• CVE-2023-24898: Windows SMB Denial of Service Vulnerability 7.5 High

  Windows SMB Denial of Service Vulnerability

  Updated 2025-07-10
• CVE-2023-24897: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 7.8 High

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Updated 2025-01-01
• CVE-2023-24896: Dynamics 365 Finance Spoofing Vulnerability 5.4 Medium

  Dynamics 365 Finance Spoofing Vulnerability

  Updated 2025-01-01
• CVE-2023-24895: .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability 7.8 High

  .NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

  Updated 2025-01-01
• CVE-2023-24893: Visual Studio Code Remote Code Execution Vulnerability 7.8 High

  Visual Studio Code Remote Code Execution Vulnerability

  Updated 2025-01-23
• CVE-2023-24892: Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability 8.2 High

  Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

  Updated 2025-02-28
• CVE-2023-24891: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 5.4 Medium

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2025-02-28
• CVE-2023-24890: Microsoft OneDrive for iOS Security Feature Bypass Vulnerability 6.5 Medium

  Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

  Updated 2025-02-28
• CVE-2023-24887: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24886: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24885: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24884: Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability 8.8 High

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Updated 2025-02-28
• CVE-2023-24883: Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability 6.5 Medium

  Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

  Updated 2025-02-28
• CVE-2023-24882: Microsoft OneDrive for Android Information Disclosure Vulnerability 5.5 Medium

  Microsoft OneDrive for Android Information Disclosure Vulnerability

  Updated 2025-02-28
• CVE-2023-24881: Microsoft Teams Information Disclosure Vulnerability 6.5 Medium

  Microsoft Teams Information Disclosure Vulnerability

  Updated 2025-07-10
• CVE-2023-24880: Windows SmartScreen Security Feature Bypass Vulnerability 4.4 Medium

  Windows SmartScreen Security Feature Bypass Vulnerability

  Updated 2025-10-21
• CVE-2023-24879: Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability 5.4 Medium

  Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

  Updated 2025-02-28

Search a CVE ID or check dependency files →