Security feature bypass

ASP.NET Core - Security Feature Bypass Vulnerability...

CVE-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability

...

CVE-2023-36558

CVE-2023-36558 affects Microsoft ASP.NET Core and Blazor forms, enabling a security feature bypass that could let an attacker bypass validations in Blazor Server forms. Connected sources confirm the vulnerability and indicate Microsoft and ecosystem advisories exist; remediation is to apply the l...

CVE-2023-36558

ASP.NET Core Security Feature Bypass Vulnerability...

CVE-2023-36560

ASP.NET Security Feature Bypass Vulnerability...

CVE-2023-36560

ASP.NET Security Feature Bypass Vulnerability...

CVE-2023-36413

Microsoft Office Security Feature Bypass Vulnerability...

CVE-2023-36037

Microsoft Excel Security Feature Bypass Vulnerability...

CVE-2023-36021

Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability...

CVE-2023-26205

An improper access control vulnerability CWE-284 in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated low-privileged attacker to escalate their privileges to superadmin via a specific crafted configuration of fabric...

Security feature bypass

Windows SmartScreen Security Feature Bypass Vulnerability...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36021

CVE-2023-36021 affects Microsoft On-Prem Data Gateway and is described as a security feature bypass. The provided documents do not include concrete technical details (root cause, affected versions, exploit vectors, or specific fixes). CVSSv3 metrics in the Initial document indicate a high-severit...

CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability

...

CVE-2023-36037 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2023-36037 Microsoft Excel Security Feature Bypass Vulnerability

...

CVE-2023-36037

CVE-2023-36037 is a Microsoft Excel security feature bypass vulnerability. Public sources label it as a high-severity, local-access issue with high impact to confidentiality, integrity, and availability (CVSSv3.1: AV=L, AC=L, PR=None, UI=Required, S=U, C/H/I/A=H). Exploitation status is not discl...

CVE-2023-36413 Microsoft Office Security Feature Bypass Vulnerability

...

CVE-2023-36413

CVE-2023-36413: Microsoft Office security feature bypass vulnerability. Affects Office components (notably Office 2016-era products in references) and can bypass Protected View, allowing opened files to enter editing mode when delivered as a malicious file. Underlying risk is an I: HIGH impact (i...

CVE-2023-36560

CVE-2023-36560 corresponds to an ASP.NET security feature bypass in the .NET Framework. The core details from the provided documents show a high-severity vulnerability (CVSS 3.1: 8.8) affecting .NET Framework/ASP.NET components, with potential impact on confidentiality, integrity, and availabilit...