CWE-416 CVEs and Security Vulnerabilities

CVE-2024-9957

Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Apple Google

Products

Iphone Os Chrome

CVE-2024-9955

Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Google

Products

Chrome

CVE-2023-35618

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 9.6 Critical EPSS 2.9% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2023-35628

Windows MSHTML Platform Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS 92.8% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 19 more

CVE-2023-36787

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed

Vendors

Microsoft

Products

Edge Chromium

CVE-2023-35382

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 5.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1809 Windows 10 21h2 Windows 10 21h2 and 8 more

CVE-2023-38184

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 16 more

CVE-2023-35300

Remote Procedure Call Runtime Remote Code Execution Vulnerability

CVSS 3.1 · 8.8 High EPSS 1.4% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 16 more

CVE-2023-32055

Active Template Library Elevation of Privilege Vulnerability

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 16 more

CVE-2023-35351

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows Server 2008 Windows Server 2008 R2 Windows Server 2008 Sp2 and 5 more

CVE-2023-35323

Windows OLE Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 11 21h2 Windows 11 21h2 Windows Server 2022

CVE-2023-35313

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 11 more

CVE-2023-21756

Windows Win32k Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 13 more

CVE-2023-33128

.NET and Visual Studio Remote Code Execution Vulnerability

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed

Vendors

Microsoft Redhat

Products

.net Powershell Visual Studio and 4 more

CVE-2023-32018

Windows Hello Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 11 22h2 Windows 11 22h2

CVE-2023-23421

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2023-23420

Windows Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 Windows 10 1507 Windows 10 1607 and 19 more

CVE-2023-23404

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 15 more

CVE-2023-23392

HTTP Protocol Stack Remote Code Execution Vulnerability

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed

Vendors

Microsoft

Products

Windows 11 21h2 Windows 11 21h2 Windows 11 22h2 and 2 more

CVE-2023-21688

NT OS Kernel Elevation of Privilege Vulnerability

CVSS 3.1 · 7.8 High EPSS 3.6% KEV · Not listed

Vendors

Microsoft

Products

Windows 10 1507 Windows 10 1607 Windows 10 1809 and 18 more

Search vulnerabilities

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Windows MSHTML Platform Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

Remote Procedure Call Runtime Remote Code Execution Vulnerability

Active Template Library Elevation of Privilege Vulnerability

Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

Windows OLE Remote Code Execution Vulnerability

Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability

Windows Win32k Elevation of Privilege Vulnerability

.NET and Visual Studio Remote Code Execution Vulnerability

Windows Hello Remote Code Execution Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

HTTP Protocol Stack Remote Code Execution Vulnerability

NT OS Kernel Elevation of Privilege Vulnerability