Vulnerabilities (CVE)

Filtered by CWE-126
Total 223 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-36581 1 Microsoft 12 Windows 10, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 7.5 HIGH
Microsoft Message Queuing Denial of Service Vulnerability
CVE-2023-36397 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-05-29 N/A 9.8 CRITICAL
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
CVE-2023-36392 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2024-05-29 N/A 7.5 HIGH
DHCP Server Service Denial of Service Vulnerability
CVE-2023-35643 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2024-05-29 N/A 7.5 HIGH
DHCP Server Service Information Disclosure Vulnerability
CVE-2023-35638 1 Microsoft 4 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 1 more 2024-05-29 N/A 7.5 HIGH
DHCP Server Service Denial of Service Vulnerability
CVE-2023-28267 1 Microsoft 14 Remote Desktop, Windows 10 1507, Windows 10 1607 and 11 more 2024-05-29 N/A 6.5 MEDIUM
Remote Desktop Protocol Client Information Disclosure Vulnerability
CVE-2023-28266 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-05-29 N/A 5.5 MEDIUM
Windows Common Log File System Driver Information Disclosure Vulnerability
CVE-2023-24942 1 Microsoft 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more 2024-05-29 N/A 7.5 HIGH
Remote Procedure Call Runtime Denial of Service Vulnerability
CVE-2023-24901 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 7.5 HIGH
Windows NFS Portmapper Information Disclosure Vulnerability
CVE-2023-24883 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-05-29 N/A 6.5 MEDIUM
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
CVE-2024-21340 1 Microsoft 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more 2024-05-29 N/A 4.6 MEDIUM
Windows Kernel Information Disclosure Vulnerability
CVE-2024-31081 2024-05-24 N/A 7.3 HIGH
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIPassiveGrabDevice() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
CVE-2024-31080 2024-05-24 N/A 7.3 HIGH
A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents() function. This issue occurs when byte-swapped length values are used in replies, potentially leading to memory leakage and segmentation faults, particularly when triggered by a client with a different endianness. This vulnerability could be exploited by an attacker to cause the X server to read heap memory values and then transmit them back to the client until encountering an unmapped page, resulting in a crash. Despite the attacker's inability to control the specific memory copied into the replies, the small length values typically stored in a 32-bit integer can result in significant attempted out-of-bounds reads.
CVE-2024-30039 2024-05-14 N/A 5.5 MEDIUM
Windows Remote Access Connection Manager Information Disclosure Vulnerability
CVE-2023-43528 2024-05-06 N/A 6.1 MEDIUM
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
CVE-2023-43527 2024-05-06 N/A 6.8 MEDIUM
Information disclosure while parsing dts header atom in Video.
CVE-2024-21477 2024-05-06 N/A 7.5 HIGH
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame.
CVE-2023-33061 1 Qualcomm 230 Ar8035, Ar8035 Firmware, Csr8811 and 227 more 2024-04-12 N/A 7.5 HIGH
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame.
CVE-2023-33048 1 Qualcomm 230 Ar8035, Ar8035 Firmware, Csr8811 and 227 more 2024-04-12 N/A 7.5 HIGH
Transient DOS in WLAN Firmware while parsing t2lm buffers.
CVE-2023-33047 1 Qualcomm 356 Ar8035, Ar8035 Firmware, Ar9380 and 353 more 2024-04-12 N/A 7.5 HIGH
Transient DOS in WLAN Firmware while parsing no-inherit IES.