Windows Security Vulnerabilities

CVE-2023-32084

HTTP.sys Denial of Service...

CVE-2023-32053

Windows Installer Elevation of Privilege...

CVE-2023-32044

Microsoft Message Queuing Denial of Service...

CVE-2023-32054

Volume Shadow Copy Elevation of Privilege...

CVE-2023-32057

Microsoft Message Queuing Remote Code Execution...

CVE-2023-32055

Active Template Library Elevation of Privilege...

CVE-2023-32083

Microsoft Failover Cluster Information Disclosure...

CVE-2023-32041

Windows Update Orchestrator Service Information Disclosure...

CVE-2023-32049

Windows SmartScreen Security Feature Bypass...

CVE-2023-32043

Windows Remote Desktop Security Feature Bypass...

CVE-2023-32045

Microsoft Message Queuing Denial of Service...

CVE-2023-32046

Windows MSHTML Platform Elevation of Privilege...

CVE-2023-32056

Windows Server Update Service (WSUS) Elevation of Privilege...

CVE-2023-32042

OLE Automation Information Disclosure...

CVE-2023-32050

Windows Installer Elevation of Privilege...

CVE-2023-21526

Windows Netlogon Information Disclosure...

CVE-2023-32039

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure...

CVE-2023-21756

Windows Win32k Elevation of Privilege...

CVE-2023-29347

Windows Admin Center Spoofing...

CVE-2023-32040

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure...

CVE-2023-32033

Microsoft Failover Cluster Remote Code Execution...

CVE-2023-32035

Remote Procedure Call Runtime Denial of Service...

CVE-2023-32037

Windows Layer-2 Bridge Network Driver Information Disclosure...

CVE-2023-32038

Microsoft ODBC Driver Remote Code Execution...

CVE-2023-32034

Remote Procedure Call Runtime Denial of Service...

CVE-2023-34116

Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via network...

CVE-2023-24490

Users with only access to launch VDA applications can launch an unauthorized...

CVE-2023-30446

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: 253361...

CVE-2023-30447

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: ...

CVE-2023-30448

IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: ...

CVE-2023-30449

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: ...

CVE-2023-30442

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 federated server is vulnerable to a denial of service as the server may crash when using a specially crafted wrapper using certain options. IBM X-Force ID: ...

CVE-2023-30431

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 db2set is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. IBM X-Force ID: ...

CVE-2023-30445

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain tables. IBM X-Force ID: ...

CVE-2023-27869

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked logger injection. By sending a specially crafted request using the named traceFile property, an attacker could...

CVE-2023-27558

IBM Db2 on Windows 10.5, 11.1, and 11.5 may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in the path of the affected...

CVE-2023-27868

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an unchecked class instantiation when providing plugin classes. By sending a specially crafted request using the named...

CVE-2023-29256

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to an information disclosure due to improper privilege management when certain federation features are used. IBM X-Force ID: ...

CVE-2023-27867

IBM Db2 JDBC Driver for Db2 for Linux, UNIX and Windows 10.5, 11.1, and 11.5 could allow a remote authenticated attacker to execute arbitrary code via JNDI Injection. By sending a specially crafted request using the property clientRerouteServerListJNDIName, an attacker could exploit this...

CVE-2023-23487

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: ...

CVE-2023-32351

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to gain elevated...

CVE-2023-32353

A logic issue was addressed with improved checks. This issue is fixed in iTunes 12.12.9 for Windows. An app may be able to elevate...

CVE-2023-25515

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information...

CVE-2023-32026

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-32027

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-32025

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-29349

Microsoft ODBC and OLE DB Remote Code Execution...

CVE-2023-29356

Microsoft ODBC Driver for SQL Server Remote Code Execution...

CVE-2023-24937

Windows CryptoAPI Denial of Service...

CVE-2023-32015

Windows Pragmatic General Multicast (PGM) Remote Code Execution...