11 April 2023

239 results · Feed

• Medium —
  GHSA-48wp-p9qv-4j64

  Commonmarker vulnerable to to several quadratic complexity bugs that may lead to denial of service

  ## Impact Several quadratic complexity bugs in commonmarker's underlying [`cmark-gfm`](https://github.com/github/cmark-gfm) library may lead to unbounded resource exhaustion and subsequent denial of service. The following vulnerabilities were addressed: * [CV…

  commonmarker RubyGems
  Apr 11, 2023
• High 7.8
  CVE-2023-28311 Public exploit

  Microsoft Word Remote Code Execution Vulnerability

  Microsoft Word Remote Code Execution Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC for Mac 2021 Microsoft Office 2019 for Mac
  Apr 11, 2023
• Medium 6.5
  CVE-2023-28312

  Azure Machine Learning Information Disclosure Vulnerability

  Azure Machine Learning Information Disclosure Vulnerability

  Microsoft Azure Machine Learning
  Apr 11, 2023
• Medium 6.6
  CVE-2023-28308

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• Medium 6.6
  CVE-2023-28307

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28304

  Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

  Microsoft ODBC and OLE DB Remote Code Execution Vulnerability

  Microsoft Microsoft OLE DB Driver 19 for SQL Server Microsoft OLE DB Driver 18 for SQL Server Microsoft ODBC Driver 17 for SQL Server
  Apr 11, 2023
• Medium 6.6
  CVE-2023-28306

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• High 7.5
  CVE-2023-28302 EPSS 93%

  Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• Medium 5.5
  CVE-2023-28299

  Visual Studio Spoofing Vulnerability

  Visual Studio Spoofing Vulnerability

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2022 version 17.4
  Apr 11, 2023
• High 7.8
  CVE-2023-28296

  Visual Studio Remote Code Execution Vulnerability

  Visual Studio Remote Code Execution Vulnerability

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2022 version 17.4
  Apr 11, 2023
• High 7.8
  CVE-2023-28293 Public exploit

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28262

  Visual Studio Elevation of Privilege Vulnerability

  Visual Studio Elevation of Privilege Vulnerability

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2
  Apr 11, 2023
• Medium 5.5
  CVE-2023-28263

  Visual Studio Information Disclosure Vulnerability

  Visual Studio Information Disclosure Vulnerability

  Microsoft Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2
  Apr 11, 2023
• Medium 6.6
  CVE-2023-28256

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28260

  .NET DLL Hijacking Remote Code Execution Vulnerability

  .NET DLL Hijacking Remote Code Execution Vulnerability

  Microsoft Microsoft Visual Studio 2022 version 17.4 Microsoft Visual Studio 2022 version 17.2 .NET 6.0 Ubuntu Alpine NuGet
  Apr 11, 2023
• Medium 6.6
  CVE-2023-28278

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• Medium 6.6
  CVE-2023-28255

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• Medium 4.9
  CVE-2023-28277

  Windows DNS Server Information Disclosure Vulnerability

  Windows DNS Server Information Disclosure Vulnerability

  Microsoft Windows Server 2022 Windows
  Apr 11, 2023
• High 7.2
  CVE-2023-28254

  Windows DNS Server Remote Code Execution Vulnerability

  Windows DNS Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• Medium 4.4
  CVE-2023-28276

  Windows Group Policy Security Feature Bypass Vulnerability

  Windows Group Policy Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 8.8
  CVE-2023-28275

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• Medium 5.5
  CVE-2023-28253

  Windows Kernel Information Disclosure Vulnerability

  Windows Kernel Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28274

  Windows Win32k Elevation of Privilege Vulnerability

  Windows Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28252 Exploited · Ransomware Public exploit EPSS 49%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023

  KEV Apr 11, 2023
• Critical 9.8
  CVE-2023-28250

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.0
  CVE-2023-28273

  Windows Clip Service Elevation of Privilege Vulnerability

  Windows Clip Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• Medium 6.2
  CVE-2023-28249

  Windows Boot Manager Security Feature Bypass Vulnerability

  Windows Boot Manager Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28272

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• Medium 5.5
  CVE-2023-28271

  Windows Kernel Memory Information Disclosure Vulnerability

  Windows Kernel Memory Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28248

  Windows Kernel Elevation of Privilege Vulnerability

  Windows Kernel Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.5
  CVE-2023-28247

  Windows Network File System Information Disclosure Vulnerability

  Windows Network File System Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• Medium 6.8
  CVE-2023-28270

  Windows Lock Screen Security Feature Bypass Vulnerability

  Windows Lock Screen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.8
  CVE-2023-28246

  Windows Registry Elevation of Privilege Vulnerability

  Windows Registry Elevation of Privilege Vulnerability

  Microsoft Windows Server 2022 Windows 11 version 22H2 Windows 11 version 21H2 Windows
  Apr 11, 2023
• High 8.1
  CVE-2023-28268

  Netlogon RPC Elevation of Privilege Vulnerability

  Netlogon RPC Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• Medium 6.2
  CVE-2023-28269

  Windows Boot Manager Security Feature Bypass Vulnerability

  Windows Boot Manager Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• Medium 6.5
  CVE-2023-28267

  Remote Desktop Protocol Client Information Disclosure Vulnerability

  Remote Desktop Protocol Client Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 8.1
  CVE-2023-28244 Public exploit

  Windows Kerberos Elevation of Privilege Vulnerability

  Windows Kerberos Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Apr 11, 2023
• High 8.8
  CVE-2023-28243

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• Medium 5.5
  CVE-2023-28266

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Windows Common Log File System Driver Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023
• High 7.5
  CVE-2023-28241

  Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

  Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 11, 2023