Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-03-12	CVE-2024-21431	Unspecified vulnerability in Microsoft products Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability local low complexity microsoft	6.7
2024-01-09	CVE-2024-20692	Exposure of Resource to Wrong Sphere vulnerability in Microsoft products Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability network low complexity microsoft CWE-668	5.7
2023-11-28	CVE-2023-24023	Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS. high complexity bluetooth microsoft	6.8
2023-11-14	CVE-2023-36404	Unspecified vulnerability in Microsoft products Windows Kernel Information Disclosure Vulnerability local low complexity microsoft	5.5
2023-11-14	CVE-2023-36406	Unspecified vulnerability in Microsoft products Windows Hyper-V Information Disclosure Vulnerability local low complexity microsoft	5.5
2023-11-14	CVE-2023-36428	Unspecified vulnerability in Microsoft products Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability local low complexity microsoft	5.5
2023-08-08	CVE-2023-20588	Divide By Zero vulnerability in multiple products A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. local low complexity debian amd xen fedoraproject microsoft CWE-369	5.5
2013-12-11	CVE-2013-3900	Improper Verification of Cryptographic Signature vulnerability in Microsoft products Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. local low complexity microsoft CWE-347	5.5