Windows Security Vulnerabilities

CVE-2023-40692

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, 11.5 is vulnerable to denial of service under extreme stress conditions. IBM X-Force ID: ...

CVE-2023-45178

IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5 CLI is vulnerable to a denial of service when a specially crafted request is used. IBM X-Force ID: ...

CVE-2023-6235

An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of...

CVE-2023-39246

Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server version prior to 11.8.1 contain an Insecure Operation on Windows Junction Vulnerability during installation. A local malicious user could potentially exploit this vulnerability to create an arbitrary...

CVE-2023-22818

Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code.....

CVE-2023-38543

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user...

CVE-2023-38043

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service (DoS) condition on the user machine and, in some cases, resulting in a full....

CVE-2023-39203

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network...

CVE-2023-39202

Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local...

CVE-2023-36705

Windows Installer Elevation of Privilege...

CVE-2023-36719

Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege...

CVE-2023-36428

Microsoft Local Security Authority Subsystem Service Information Disclosure...

CVE-2023-36425

Windows Distributed File System (DFS) Remote Code Execution...

CVE-2023-36427

Windows Hyper-V Elevation of Privilege...

CVE-2023-36424

Windows Common Log File System Driver Elevation of Privilege...

CVE-2023-36422

Microsoft Windows Defender Elevation of Privilege...

CVE-2023-36423

Microsoft Remote Registry Service Remote Code Execution...

CVE-2023-36407

Windows Hyper-V Elevation of Privilege...

CVE-2023-36408

Windows Hyper-V Elevation of Privilege...

CVE-2023-36406

Windows Hyper-V Information Disclosure...

CVE-2023-36405

Windows Kernel Elevation of Privilege...

CVE-2023-36404

Windows Kernel Information Disclosure...

CVE-2023-36402

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution...

CVE-2023-36403

Windows Kernel Elevation of Privilege...

CVE-2023-36401

Microsoft Remote Registry Service Remote Code Execution...

CVE-2023-36400

Windows HMAC Key Derivation Elevation of Privilege...

CVE-2023-36399

Windows Storage Elevation of Privilege...

CVE-2023-36396

Windows Compressed Folder Remote Code Execution...

CVE-2023-36397

Windows Pragmatic General Multicast (PGM) Remote Code Execution...

CVE-2023-36398

Windows NTFS Information Disclosure...

CVE-2023-36395

Windows Deployment Services Denial of Service...

CVE-2023-36394

Windows Search Service Elevation of Privilege...

CVE-2023-36392

DHCP Server Service Denial of Service...

CVE-2023-36393

Windows User Interface Application Core Remote Code Execution...

CVE-2023-36047

Windows Authentication Elevation of Privilege...

CVE-2023-36046

Windows Authentication Denial of Service...

CVE-2023-36036

Windows Cloud Files Mini Filter Driver Elevation of Privilege...

CVE-2023-36033

Windows DWM Core Library Elevation of Privilege...

CVE-2023-36028

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution...

CVE-2023-36025

Windows SmartScreen Security Feature Bypass...

CVE-2023-36017

Windows Scripting Engine Memory Corruption...

CVE-2023-5739

Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of...

CVE-2023-5671

HP Print and Scan Doctor for Windows may potentially be vulnerable to escalation of privilege. HP is releasing software updates to mitigate the potential...

CVE-2023-40372

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External Tables. IBM X-Force ID: ...

CVE-2023-38719

IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF. IBM X-Force ID: ...

CVE-2023-40373

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table expressions. IBM X-Force ID: ...

CVE-2023-30991

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: ...

CVE-2023-40374

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted query statement. IBM X-Force ID: ...

CVE-2023-38740

IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: ...

CVE-2023-38728

IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query statement. IBM X-Force ID: ...