2023 CVE Vulnerabilities
31,475 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-45077 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated pri... |
| CVE-2023-45076 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated pri... |
| CVE-2023-45075 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated... |
| CVE-2023-43581 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker ... |
| CVE-2023-43580 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacke... |
| CVE-2023-43579 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker w... |
| CVE-2023-43578 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker wi... |
| CVE-2023-43577 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wit... |
| CVE-2023-43576 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker wi... |
| CVE-2023-43575 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local a... |
| CVE-2023-43574 | MEDIUM | 4.4 | 0.2% | Nov 8, 2023 | A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may a... |
| CVE-2023-43573 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may al... |
| CVE-2023-43572 | MEDIUM | 4.4 | 0.2% | Nov 8, 2023 | A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local... |
| CVE-2023-43571 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local ... |
| CVE-2023-5078 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privilege... |
| CVE-2023-5075 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local at... |
| CVE-2023-4891 | MEDIUM | 5.5 | 0.2% | Nov 8, 2023 | A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service.... |
| CVE-2023-47114 | MEDIUM | 6.1 | 0.6% | Nov 8, 2023 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in your runti... |
| CVE-2023-43570 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacke... |
| CVE-2023-43569 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with... |
| CVE-2023-43568 | MEDIUM | 4.4 | 0.2% | Nov 8, 2023 | A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loc... |
| CVE-2023-43567 | MEDIUM | 6.7 | 0.2% | Nov 8, 2023 | A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loca... |
| CVE-2023-46363 | MEDIUM | 5.5 | 0.3% | Nov 8, 2023 | jbig2enc v0.28 was discovered to contain a SEGV via jbig2_add_page in src/jbig2enc.cc:512. |
| CVE-2023-46362 | MEDIUM | 5.5 | 0.3% | Nov 8, 2023 | jbig2enc v0.28 was discovered to contain a heap-use-after-free via jbig2enc_auto_threshold_using_hash in src/jbig2enc.cc... |
| CVE-2023-45857 | MEDIUM | 6.5 | 0.6% | Nov 8, 2023 | An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it i... |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now