Archive

12 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /12 October 2023 →

All Critical High Medium Low Exploited only Public exploit

79 results · Clear filters · Feed

High 7.2

CVE-2023-39201

Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of …

Zoom Video Communications CleanZoom

Sep 12, 2023
High 7.1

CVE-2023-39215

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network acce…

Zoom Video Communications Zoom Clients

Sep 12, 2023
High 7.8

CVE-2023-41036

Macvim's Insecure Usage of IPC Mechanisms

Macvim is a text editor for MacOS. Prior to version 178, Macvim makes use of an insecure interprocess communication (IPC) mechanism which could lead to a privilege escalation. Distributed objects are a concept introduced by Apple which allow one program to ve…

macvim-dev macvim

Sep 12, 2023
High 7.8

CVE-2023-4921

Use-after-free in Linux kernel's net/sched: sch_qfq component

A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue()…

Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

Sep 12, 2023
High 8.8

CVE-2023-4918

Plaintext storage of user password

A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and client…

Red Hat Red Hat Single Sign-On 7 org.keycloak:keycloak-core Maven

Sep 12, 2023
High 7.8

CVE-2023-36740

3D Viewer Remote Code Execution Vulnerability

3D Viewer Remote Code Execution Vulnerability

Microsoft 3D Viewer

Sep 12, 2023
High 7.8

CVE-2023-36739

3D Viewer Remote Code Execution Vulnerability

3D Viewer Remote Code Execution Vulnerability

Microsoft 3D Viewer

Sep 12, 2023
High 7.8

CVE-2023-36760

3D Viewer Remote Code Execution Vulnerability

3D Viewer Remote Code Execution Vulnerability

Microsoft 3D Viewer

Sep 12, 2023
High 7.3

CVE-2023-36762

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Sep 12, 2023
High 8.8

CVE-2023-36764

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft SharePoint Server Elevation of Privilege Vulnerability

Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition

Sep 12, 2023
High 7.5

CVE-2023-36763

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Sep 12, 2023
High 7.8

CVE-2023-36770

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

Microsoft 3D Builder

Sep 12, 2023
High 7.8

CVE-2023-36771

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

Microsoft 3D Builder

Sep 12, 2023
High 7.8

CVE-2023-36772

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

Microsoft 3D Builder

Sep 12, 2023
High 7.8

CVE-2023-36773

3D Builder Remote Code Execution Vulnerability

3D Builder Remote Code Execution Vulnerability

Microsoft 3D Builder

Sep 12, 2023
High 7.8

CVE-2023-36788

.NET Framework Remote Code Execution Vulnerability

.NET Framework Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8.1

Sep 12, 2023
High 7.8

CVE-2023-36792

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Alpine NuGet

Sep 12, 2023
High 7.8

CVE-2023-36793

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Alpine NuGet

Sep 12, 2023
High 7.8

CVE-2023-36796

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.7.2 Alpine NuGet

Sep 12, 2023
High 7.8

CVE-2023-36794

Visual Studio Remote Code Execution Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Alpine NuGet

Sep 12, 2023
High 7.6

CVE-2023-36800

Dynamics Finance and Operations Cross-site Scripting Vulnerability

Dynamics Finance and Operations Cross-site Scripting Vulnerability

Microsoft Dynamics 365 for Finance and Operations

Sep 12, 2023
High 7.0

CVE-2023-38155

Azure DevOps Server Remote Code Execution Vulnerability

Azure DevOps Server Remote Code Execution Vulnerability

Microsoft Azure DevOps Server Azure DevOps Server 2020.1.2 Azure DevOps Server 2019.0.1

Sep 12, 2023
High 7.8

CVE-2023-38163

Windows Defender Attack Surface Reduction Security Feature Bypass

Windows Defender Attack Surface Reduction Security Feature Bypass

Microsoft Microsoft Defender Security Intelligence Updates

Sep 12, 2023
High 7.6

CVE-2023-38164

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.1 Microsoft Dynamics 365 (on-premises) version 9.0

Sep 12, 2023
High 7.6

CVE-2023-36886

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

Microsoft Microsoft Dynamics 365 (on-premises) version 9.0 Microsoft Dynamics 365 (on-premises) version 9.1

Sep 12, 2023
High 8.8

CVE-2023-33136

Azure DevOps Server Remote Code Execution Vulnerability

Azure DevOps Server Remote Code Execution Vulnerability

Microsoft Azure DevOps Server Azure DevOps Server 2020.1.2 Azure DevOps Server 2019.0.1

Sep 12, 2023
High 7.5

CVE-2023-29332

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

Microsoft Azure Kubernetes Service

Sep 12, 2023
High 7.8

CVE-2023-36742

Visual Studio Code Remote Code Execution Vulnerability

Visual Studio Code Remote Code Execution Vulnerability

Microsoft Visual Studio Code

Sep 12, 2023
High 8.0

CVE-2023-36744 EPSS 57%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 8.0

CVE-2023-36745 Public exploit EPSS 76%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 8.0

CVE-2023-36756 EPSS 49%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 8.0

CVE-2023-36757 EPSS 37%

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 7.8

CVE-2023-36758

Visual Studio Elevation of Privilege Vulnerability

Visual Studio Elevation of Privilege Vulnerability

Microsoft Microsoft Visual Studio 2022 version 17.7

Sep 12, 2023
High 7.8

CVE-2023-36765

Microsoft Office Elevation of Privilege Vulnerability

Microsoft Office Elevation of Privilege Vulnerability

Microsoft Microsoft Office 2019

Sep 12, 2023
High 7.8

CVE-2023-36766

Microsoft Excel Information Disclosure Vulnerability

Microsoft Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office LTSC for Mac 2021

Sep 12, 2023
High 7.8

CVE-2023-36802 Exploited Public exploit EPSS 28%

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
KEV Sep 12, 2023
High 7.8

CVE-2023-36804

Windows GDI Elevation of Privilege Vulnerability

Windows GDI Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.0

CVE-2023-36805

Windows MSHTML Platform Security Feature Bypass Vulnerability

Windows MSHTML Platform Security Feature Bypass Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38139

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
High 7.8

CVE-2023-38142

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023