CVE-2023-35xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
590 records · Page 4 of 6
In Init of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Updatedthere is a possible out of bounds write due to buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn ProfSixDecomTcpSACKoption of RohcPacketCommon.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn lwis_transaction_client_cleanup of lwis_transaction.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn bta_av_config_ind of bta_av_aact.cc, there is a possible out of bounds read due to type confusion. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn multiple functions of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn CanConvertPadV2Op of darwinn_mlir_converter_aidl.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn ctrl_roi of stmvl53l1_module.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
UpdatedIn several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
UpdatedIn ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
UpdatedIn TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
UpdatedIn tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
UpdatedWindows Sysmain Service Elevation of Privilege Vulnerability
UpdatedDHCP Server Service Information Disclosure Vulnerability
UpdatedInternet Connection Sharing (ICS) Denial of Service Vulnerability
UpdatedInternet Connection Sharing (ICS) Remote Code Execution Vulnerability
UpdatedMicrosoft ODBC Driver Remote Code Execution Vulnerability
UpdatedDHCP Server Service Denial of Service Vulnerability
UpdatedMicrosoft Outlook Information Disclosure Vulnerability
UpdatedWindows Kernel Denial of Service Vulnerability
UpdatedWindows Bluetooth Driver Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
Updated- CVE-2023-35632: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
Updated Win32k Elevation of Privilege Vulnerability
UpdatedInternet Connection Sharing (ICS) Remote Code Execution Vulnerability
UpdatedMicrosoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
UpdatedWindows MSHTML Platform Remote Code Execution Vulnerability
UpdatedAzure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability
UpdatedAzure Connected Machine Agent Elevation of Privilege Vulnerability
UpdatedWindows DNS Spoofing Vulnerability
Updated- CVE-2023-35621: Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability 7.5 High
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
Updated Microsoft Outlook for Mac Spoofing Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedAzure HDInsight Jupyter Notebook Spoofing Vulnerability
UpdatedAzure Apache Hive Spoofing Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Spoofing Vulnerability
Updated- CVE-2023-35391: ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability 6.2 Medium
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
Updated .NET and Visual Studio Remote Code Execution Vulnerability
UpdatedMicrosoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
UpdatedWindows Bluetooth A2DP driver Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedWindows HTML Platforms Security Feature Bypass Vulnerability
UpdatedMicrosoft Message Queuing Information Disclosure Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Fax Service Remote Code Execution Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedReliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
UpdatedWindows Projected File System Elevation of Privilege Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedPaint 3D Remote Code Execution Vulnerability
UpdatedMono Authenticode Validation Spoofing Vulnerability
UpdatedMicrosoft Office Visio Remote Code Execution Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedMicrosoft Exchange Remote Code Execution Vulnerability
Updated- CVE-2023-35367: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 9.8 Critical
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated - CVE-2023-35366: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 9.8 Critical
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated - CVE-2023-35365: Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability 9.8 Critical
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Updated Windows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Clip Service Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
UpdatedWindows Kernel Elevation of Privilege Vulnerability
Updated- CVE-2023-35355: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated - CVE-2023-35353: Connected User Experiences and Telemetry Elevation of Privilege Vulnerability 7.8 High
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
Updated Windows Remote Desktop Security Feature Bypass Vulnerability
UpdatedWindows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
UpdatedWindows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Updated- CVE-2023-35348: Active Directory Federation Service Security Feature Bypass Vulnerability 6.5 Medium
Active Directory Federation Service Security Feature Bypass Vulnerability
Updated Microsoft Install Service Elevation of Privilege Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows DNS Server Remote Code Execution Vulnerability
UpdatedWindows Geolocation Service Remote Code Execution Vulnerability
UpdatedWindows Image Acquisition Elevation of Privilege Vulnerability
UpdatedMicrosoft DirectMusic Information Disclosure Vulnerability
UpdatedWindows CNG Key Isolation Service Elevation of Privilege Vulnerability
UpdatedWindows CryptoAPI Denial of Service Vulnerability
UpdatedWindows Peer Name Resolution Protocol Denial of Service Vulnerability
UpdatedWin32k Elevation of Privilege Vulnerability
UpdatedWindows MSHTML Platform Security Feature Bypass Vulnerability
UpdatedMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
UpdatedMediaWiki PandocUpload Extension Remote Code Execution Vulnerability
UpdatedWindows Remote Desktop Protocol Security Feature Bypass
UpdatedWindows Local Security Authority (LSA) Denial of Service Vulnerability
UpdatedWindows Extended Negotiation Denial of Service Vulnerability
UpdatedWindows Authentication Denial of Service Vulnerability
UpdatedWindows Transaction Manager Elevation of Privilege Vulnerability
Updated