Vulnerabilities > Microsoft > Windows Server 2022 > 10.0.20348.1668

DATE CVE VULNERABILITY TITLE RISK
2024-02-13 CVE-2024-21343 Unspecified vulnerability in Microsoft products
Windows Network Address Translation (NAT) Denial of Service Vulnerability
network
low complexity
microsoft
7.5
2024-02-13 CVE-2024-21363 Unspecified vulnerability in Microsoft products
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
local
low complexity
microsoft
7.8
2024-01-09 CVE-2024-20692 Exposure of Resource to Wrong Sphere vulnerability in Microsoft products
Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability
network
low complexity
microsoft CWE-668
5.7
2024-01-09 CVE-2024-21320 Unspecified vulnerability in Microsoft products
Windows Themes Spoofing Vulnerability
network
low complexity
microsoft
6.5
2023-11-28 CVE-2023-24023 Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-middle attacks that force a short key length, and might lead to discovery of the encryption key and live injection, aka BLUFFS.
high complexity
bluetooth microsoft
6.8
2023-11-14 CVE-2023-36025 Unspecified vulnerability in Microsoft products
Windows SmartScreen Security Feature Bypass Vulnerability
network
low complexity
microsoft
8.8
2023-11-14 CVE-2023-36033 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Microsoft products
Windows DWM Core Library Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-119
7.8
2023-11-14 CVE-2023-36036 Out-of-bounds Write vulnerability in Microsoft products
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
local
low complexity
microsoft CWE-787
7.8
2023-10-18 CVE-2023-38545 Out-of-bounds Write vulnerability in multiple products
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy to allow that to resolve the address instead of it getting done by curl itself, the maximum length that host name can be is 255 bytes. If the host name is detected to be longer, curl switches to local name resolving and instead passes on the resolved address only.
network
low complexity
haxx fedoraproject netapp microsoft CWE-787
critical
9.8
2023-10-10 CVE-2023-36563 Unspecified vulnerability in Microsoft products
Microsoft WordPad Information Disclosure Vulnerability
local
low complexity
microsoft
5.5