Vulnerabilities > Microsoft

DATE CVE VULNERABILITY TITLE RISK
2024-11-26 CVE-2024-49035 Unspecified vulnerability in Microsoft Partner Center
An improper access control vulnerability in Partner.Microsoft.com allows an a unauthenticated attacker to elevate privileges over a network.
network
low complexity
microsoft
critical
9.8
2024-11-26 CVE-2024-49038 Unspecified vulnerability in Microsoft Copilot Studio
Improper neutralization of input during web page generation ('Cross-site Scripting') in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network.
network
low complexity
microsoft
critical
9.6
2024-11-26 CVE-2024-49052 Unspecified vulnerability in Microsoft Azure Functions
Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network.
network
low complexity
microsoft
critical
9.8
2024-11-14 CVE-2024-49025 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
network
low complexity
microsoft
4.3
2024-11-12 CVE-2024-38203 Unspecified vulnerability in Microsoft products
Windows Package Library Manager Information Disclosure Vulnerability
local
low complexity
microsoft
5.5
2024-11-12 CVE-2024-38255 Unspecified vulnerability in Microsoft SQL Server 2016, SQL Server 2017 and SQL Server 2019
SQL Server Native Client Remote Code Execution Vulnerability
network
low complexity
microsoft
8.8
2024-11-12 CVE-2024-38264 Unspecified vulnerability in Microsoft products
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
network
high complexity
microsoft
5.9
2024-11-12 CVE-2024-43447 Unspecified vulnerability in Microsoft Windows Server 2022
Windows SMBv3 Server Remote Code Execution Vulnerability
network
high complexity
microsoft
8.1
2024-11-12 CVE-2024-43449 Unspecified vulnerability in Microsoft products
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
low complexity
microsoft
6.8
2024-11-12 CVE-2024-43450 Unspecified vulnerability in Microsoft products
Windows DNS Spoofing Vulnerability
network
high complexity
microsoft
7.5