Vulnerabilities > Microsoft
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-04-04 | CVE-2024-29049 | Cross-site Scripting vulnerability in Microsoft Edge Chromium Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability | 4.7 |
2024-03-23 | CVE-2024-29059 | Information Exposure Through an Error Message vulnerability in Microsoft .Net Framework .NET Framework Information Disclosure Vulnerability | 7.5 |
2024-03-22 | CVE-2024-29057 | Unspecified vulnerability in Microsoft Edge Microsoft Edge (Chromium-based) Spoofing Vulnerability | 4.3 |
2024-03-14 | CVE-2024-26246 | Unspecified vulnerability in Microsoft Edge 112.0.1722.34/118.0.2088.88/122.0.2365.63 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability low complexity microsoft | 3.9 |
2024-03-12 | CVE-2024-21419 | Cross-site Scripting vulnerability in Microsoft Dynamics 365 Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | 5.4 |
2024-03-12 | CVE-2024-21430 | Unspecified vulnerability in Microsoft products Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability high complexity microsoft | 6.4 |
2024-03-12 | CVE-2024-21431 | Unspecified vulnerability in Microsoft products Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability | 6.7 |
2024-02-29 | CVE-2024-0590 | Unspecified vulnerability in Microsoft Clarity 0.3 The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3. | 6.1 |
2024-02-27 | CVE-2024-27099 | Double Free vulnerability in Microsoft Azure Uamqp The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services. | 9.8 |
2024-02-14 | CVE-2023-50387 | Allocation of Resources Without Limits or Throttling vulnerability in multiple products Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue. | 7.5 |