Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-07-31 CVE-2024-38182 Unspecified vulnerability in Microsoft Dynamics 365 7.0
Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.
network
low complexity
microsoft
critical
9.8
2024-07-09 CVE-2024-38089 Unspecified vulnerability in Microsoft Defender for IOT
Microsoft Defender for IoT Elevation of Privilege Vulnerability
network
low complexity
microsoft
critical
9.9
2024-06-27 CVE-2024-35260 Unspecified vulnerability in Microsoft Power Platform
An authenticated attacker can exploit an untrusted search path vulnerability in Microsoft Dataverse to execute code over a network.
network
low complexity
microsoft
critical
9.8
2024-04-09 CVE-2024-29990 Unspecified vulnerability in Microsoft Azure Kubernetes Service Confidential Containers
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
network
high complexity
microsoft
critical
9.0
2024-02-27 CVE-2024-27099 Double Free vulnerability in Microsoft Azure Uamqp
The uAMQP is a C library for AMQP 1.0 communication to Azure Cloud Services.
network
low complexity
microsoft CWE-415
critical
9.8
2024-02-13 CVE-2024-21413 Unspecified vulnerability in Microsoft products
Microsoft Outlook Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.8
2024-01-10 CVE-2024-21638 Improper Authentication vulnerability in Microsoft Azure Ipam
Azure IPAM (IP Address Management) is a lightweight solution developed on top of the Azure platform designed to help Azure customers manage their IP Address space easily and effectively.
network
low complexity
microsoft CWE-287
critical
9.8
2024-01-09 CVE-2024-0057 Unspecified vulnerability in Microsoft products
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
network
low complexity
microsoft
critical
9.8
2024-01-09 CVE-2024-21646 Integer Overflow or Wraparound vulnerability in Microsoft Azure Uamqp 20231201
Azure uAMQP is a general purpose C library for AMQP 1.0.
network
low complexity
microsoft CWE-190
critical
9.8
2023-12-05 CVE-2023-48315 Unspecified vulnerability in Microsoft Azure Rtos Netx DUO
Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications.
network
low complexity
microsoft
critical
9.8