Vulnerabilities > Microsoft > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-08-08 CVE-2023-38254 Unspecified vulnerability in Microsoft products
Microsoft Message Queuing Denial of Service Vulnerability
network
low complexity
microsoft
6.5
2023-08-07 CVE-2023-38157 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
network
low complexity
microsoft
6.5
2023-07-21 CVE-2023-35392 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
network
low complexity
microsoft
4.7
2023-07-21 CVE-2023-38173 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge for Android Spoofing Vulnerability
network
low complexity
microsoft
4.3
2023-07-21 CVE-2023-38187 Unspecified vulnerability in Microsoft Edge Chromium
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
network
high complexity
microsoft
6.5
2023-07-18 CVE-2023-37139 Out-of-bounds Write vulnerability in Microsoft Chakracore
ChakraCore branch master cbb9b was discovered to contain a stack overflow vulnerability via the function Js::ScopeSlots::IsDebuggerScopeSlotArray().
local
low complexity
microsoft CWE-787
5.5
2023-07-18 CVE-2023-37140 Resource Exhaustion vulnerability in Microsoft Chakracore
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::DiagScopeVariablesWalker::GetChildrenCount().
local
low complexity
microsoft CWE-400
5.5
2023-07-18 CVE-2023-37141 Resource Exhaustion vulnerability in Microsoft Chakracore
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::ProfilingHelpers::ProfiledNewScArray().
local
low complexity
microsoft CWE-400
5.5
2023-07-18 CVE-2023-37142 Resource Exhaustion vulnerability in Microsoft Chakracore
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function Js::EntryPointInfo::HasInlinees().
local
low complexity
microsoft CWE-400
5.5
2023-07-18 CVE-2023-37143 Resource Exhaustion vulnerability in Microsoft Chakracore
ChakraCore branch master cbb9b was discovered to contain a segmentation violation via the function BackwardPass::IsEmptyLoopAfterMemOp().
local
low complexity
microsoft CWE-400
5.5