Vulnerabilities > Microsoft

DATE CVE VULNERABILITY TITLE RISK
2024-04-04 CVE-2024-29049 Cross-site Scripting vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
network
high complexity
microsoft CWE-79
4.7
2024-03-23 CVE-2024-29059 Information Exposure Through an Error Message vulnerability in Microsoft .Net Framework
.NET Framework Information Disclosure Vulnerability
network
low complexity
microsoft CWE-209
7.5
2024-03-22 CVE-2024-29057 Unspecified vulnerability in Microsoft Edge
Microsoft Edge (Chromium-based) Spoofing Vulnerability
network
low complexity
microsoft
4.3
2024-03-14 CVE-2024-26246 Unspecified vulnerability in Microsoft Edge 112.0.1722.34/118.0.2088.88/122.0.2365.63
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
low complexity
microsoft
3.9
2024-03-12 CVE-2024-21419 Cross-site Scripting vulnerability in Microsoft Dynamics 365
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
network
low complexity
microsoft CWE-79
5.4
2024-03-12 CVE-2024-21430 Unspecified vulnerability in Microsoft products
Windows USB Attached SCSI (UAS) Protocol Remote Code Execution Vulnerability
high complexity
microsoft
6.4
2024-03-12 CVE-2024-21431 Unspecified vulnerability in Microsoft products
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
local
low complexity
microsoft
6.7
2024-02-29 CVE-2024-0590 Unspecified vulnerability in Microsoft Clarity 0.3
The Microsoft Clarity plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.9.3.
network
low complexity
microsoft
6.1
2024-02-27 CVE-2024-27099 Double Free vulnerability in Microsoft Azure Uamqp
The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services.
network
low complexity
microsoft CWE-415
critical
9.8
2024-02-14 CVE-2023-50387 Allocation of Resources Without Limits or Throttling vulnerability in multiple products
Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumption) via one or more DNSSEC responses, aka the "KeyTrap" issue.
7.5