CVE-2023-28xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
880 records · Page 7 of 9
A use after free vulnerability exists in curl <v8.1.0 in the way libcurl offers a feature to verify an SSH server's public key using a SHA 256 hash. When this check fails, libcurl would free the memory for the fingerprint before it returns an error message containing the (now freed) hash. This flaw risks inserting sensitive heap-based data into the error message that might be shown to users or oth
UpdatedA vulnerability has been discovered in Rocket.Chat, where messages can be hidden regardless of the Message_KeepHistory or Message_ShowDeletedStatus server configuration. This allows users to bypass the intended message deletion behavior, hiding messages and deletion notices.
UpdatedA vulnerability has been discovered in Rocket.Chat, where editing messages can change the original timestamp, causing the UI to display messages in an incorrect order.
UpdatedA security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other active sessions are not invalidated upon activating 2FA. This could potentially allow an attacker to maintain access to a compromised account even after 2FA is enabled.
UpdatedMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
UpdatedMicrosoft Dynamics 365 Customer Voice Cross-Site Scripting Vulnerability
UpdatedAzure Machine Learning Information Disclosure Vulnerability
UpdatedMicrosoft Word Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedMicrosoft ODBC and OLE DB Remote Code Execution Vulnerability
UpdatedWindows Snipping Tool Information Disclosure Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Tampering Vulnerability
UpdatedAzure Service Connector Security Feature Bypass Vulnerability
UpdatedVisual Studio Spoofing Vulnerability
UpdatedWindows Kernel Denial of Service Vulnerability
Updated- CVE-2023-28297: Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability 8.8 High
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
Updated Visual Studio Remote Code Execution Vulnerability
UpdatedMicrosoft Publisher Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
Updated- CVE-2023-28290: Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability 5.3 Medium
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
Updated Microsoft SharePoint Server Spoofing Vulnerability
UpdatedMicrosoft Publisher Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability
UpdatedWindows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Information Disclosure Vulnerability
UpdatedWindows Group Policy Security Feature Bypass Vulnerability
Updated- CVE-2023-28275: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated Windows Win32k Elevation of Privilege Vulnerability
UpdatedWindows Clip Service Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Memory Information Disclosure Vulnerability
UpdatedWindows Lock Screen Security Feature Bypass Vulnerability
UpdatedWindows Boot Manager Security Feature Bypass Vulnerability
UpdatedNetlogon RPC Elevation of Privilege Vulnerability
UpdatedRemote Desktop Protocol Client Information Disclosure Vulnerability
Updated- CVE-2023-28266: Windows Common Log File System Driver Information Disclosure Vulnerability 5.5 Medium
Windows Common Log File System Driver Information Disclosure Vulnerability
Updated Visual Studio Information Disclosure Vulnerability
UpdatedVisual Studio Elevation of Privilege Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Updated.NET DLL Hijacking Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
UpdatedWindows Common Log File System Driver Elevation of Privilege Vulnerability
UpdatedWindows Driver Revocation List Security Feature Bypass Vulnerability
Updated- CVE-2023-28250: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 9.8 Critical
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Updated Windows Boot Manager Security Feature Bypass Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Network File System Information Disclosure Vulnerability
UpdatedWindows Registry Elevation of Privilege Vulnerability
UpdatedWindows Kerberos Elevation of Privilege Vulnerability
UpdatedMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Updated- CVE-2023-28241: Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability 7.5 High
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
Updated Windows Network Load Balancing Remote Code Execution Vulnerability
UpdatedWindows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
UpdatedWindows Kernel Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Lock Screen Security Feature Bypass Vulnerability
UpdatedWindows Secure Channel Denial of Service Vulnerability
UpdatedWindows Secure Channel Denial of Service Vulnerability
Updated- CVE-2023-28232: Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability 7.5 High
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
Updated DHCP Server Service Remote Code Execution Vulnerability
UpdatedWindows CNG Key Isolation Service Elevation of Privilege Vulnerability
UpdatedWindows Spoofing Vulnerability
UpdatedWindows Bluetooth Driver Remote Code Execution Vulnerability
UpdatedWindows Enroll Engine Security Feature Bypass Vulnerability
UpdatedWindows NTLM Elevation of Privilege Vulnerability
UpdatedWindows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
UpdatedWindows Domain Name Service Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Error Reporting Service Elevation of Privilege Vulnerability
UpdatedLayer 2 Tunneling Protocol Remote Code Execution Vulnerability
UpdatedLayer 2 Tunneling Protocol Remote Code Execution Vulnerability
Updated- CVE-2023-28218: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.0 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Updated Windows Network Address Translation (NAT) Denial of Service Vulnerability
Updated- CVE-2023-28216: Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 7.0 High
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Updated A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.
UpdatedA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.
UpdatedThe issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. A plug-in may be able to inherit app permissions and access user data.
UpdatedAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
UpdatedA use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
UpdatedAn out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
Updated