Windows 11 23H2 Security Vulnerabilities

CVE-2023-20588

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality.

CVE-2023-21740

Windows Media Remote Code Execution Vulnerability

CVE-2023-24023

Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.

CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability

CVE-2023-35630

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2023-35631

Win32k Elevation of Privilege Vulnerability

CVE-2023-35634

Windows Bluetooth Driver Remote Code Execution Vulnerability

CVE-2023-35635

Windows Kernel Denial of Service Vulnerability

CVE-2023-35639

Microsoft ODBC Driver Remote Code Execution Vulnerability

CVE-2023-35641

Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

CVE-2023-35642

Internet Connection Sharing (ICS) Denial of Service Vulnerability

CVE-2023-35644

Windows Sysmain Service Elevation of Privilege

CVE-2023-36003

XAML Diagnostics Elevation of Privilege Vulnerability

CVE-2023-36004

Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability

CVE-2023-36005

Windows Telephony Server Elevation of Privilege Vulnerability

CVE-2023-36006

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36011

Win32k Elevation of Privilege Vulnerability

CVE-2023-36017

Windows Scripting Engine Memory Corruption Vulnerability

CVE-2023-36025

Windows SmartScreen Security Feature Bypass Vulnerability

CVE-2023-36028

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

CVE-2023-36033

Windows DWM Core Library Elevation of Privilege Vulnerability

CVE-2023-36036

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36046

Windows Authentication Denial of Service Vulnerability

CVE-2023-36047

Windows Authentication Elevation of Privilege Vulnerability

CVE-2023-36391

Local Security Authority Subsystem Service Elevation of Privilege Vulnerability

CVE-2023-36393

Windows User Interface Application Core Remote Code Execution Vulnerability

CVE-2023-36396

Windows Compressed Folder Remote Code Execution Vulnerability

CVE-2023-36397

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

CVE-2023-36398

Windows NTFS Information Disclosure Vulnerability

CVE-2023-36399

Windows Storage Elevation of Privilege Vulnerability

CVE-2023-36400

Windows HMAC Key Derivation Elevation of Privilege Vulnerability

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2023-36402

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

CVE-2023-36403

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36404

Windows Kernel Information Disclosure Vulnerability

CVE-2023-36405

Windows Kernel Elevation of Privilege Vulnerability

CVE-2023-36406

Windows Hyper-V Information Disclosure Vulnerability

CVE-2023-36407

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36408

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36423

Microsoft Remote Registry Service Remote Code Execution Vulnerability

CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege Vulnerability

CVE-2023-36425

Windows Distributed File System (DFS) Remote Code Execution Vulnerability

CVE-2023-36427

Windows Hyper-V Elevation of Privilege Vulnerability

CVE-2023-36428

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

CVE-2023-36696

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVE-2023-36705

Windows Installer Elevation of Privilege Vulnerability

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability

CVE-2023-38039

When curl retrieves an HTTP response, it stores the incoming headers so thatthey can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it wouldaccept in a response, allowing a malicious server to stream an endless seriesof headers and...

CVE-2023-38545

This flaw makes curl overflow a heap based buffer in the SOCKS5 proxyhandshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allowthat to resolve the address instead of it getting done by curl itself, themaximum length that host name can be is 255 bytes. If the host name is...