2023 CVE Vulnerabilities
31,509 CVEs published in 2023.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2023-20521 | MEDIUM | 5.7 | 0.3% | Nov 14, 2023 | TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory cont... |
| CVE-2023-20519 | LOW | 3.3 | 0.2% | Nov 14, 2023 | A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masque... |
| CVE-2023-45585 | LOW | 3.3 | 0.2% | Nov 14, 2023 | An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 an... |
| CVE-2023-45582 | HIGH | 7.3 | 0.5% | Nov 14, 2023 | An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 ... |
| CVE-2023-44248 | MEDIUM | 5.5 | 0.2% | Nov 14, 2023 | An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 ... |
| CVE-2023-42783 | HIGH | 7.5 | 0.9% | Nov 14, 2023 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4... |
| CVE-2023-41840 | HIGH | 7.8 | 0.3% | Nov 14, 2023 | A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack at... |
| CVE-2023-41676 | MEDIUM | 6.5 | 0.4% | Nov 14, 2023 | An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may... |
| CVE-2023-38177 | MEDIUM | 6.8 | 3.4% | Nov 14, 2023 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
| CVE-2023-38151 | HIGH | 8.8 | 1.8% | Nov 14, 2023 | Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability |
| CVE-2023-36719 | HIGH | 7.8 | 0.6% | Nov 14, 2023 | Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability |
| CVE-2023-36705 | HIGH | 7.8 | 0.7% | Nov 14, 2023 | Windows Installer Elevation of Privilege Vulnerability |
| CVE-2023-36641 | MEDIUM | 6.5 | 1.3% | Nov 14, 2023 | A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7... |
| CVE-2023-36633 | MEDIUM | 5.4 | 0.5% | Nov 14, 2023 | An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allo... |
| CVE-2023-36560 | HIGH | 8.8 | 2.7% | Nov 14, 2023 | ASP.NET Security Feature Bypass Vulnerability |
| CVE-2023-36553 | CRITICAL | 9.8 | 1.9% | Nov 14, 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM versi... |
| CVE-2023-36439 | HIGH | 8 | 4.9% | Nov 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability |
| CVE-2023-36428 | MEDIUM | 5.5 | 0.8% | Nov 14, 2023 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
| CVE-2023-36427 | HIGH | 7 | 1.5% | Nov 14, 2023 | Windows Hyper-V Elevation of Privilege Vulnerability |
| CVE-2023-36425 | HIGH | 8 | 1.5% | Nov 14, 2023 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
| CVE-2023-36424 | HIGH | 7.8 | 12.2% | Nov 14, 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
| CVE-2023-36423 | HIGH | 8.8 | 2.0% | Nov 14, 2023 | Microsoft Remote Registry Service Remote Code Execution Vulnerability |
| CVE-2023-36422 | HIGH | 7.8 | 0.8% | Nov 14, 2023 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
| CVE-2023-36413 | MEDIUM | 6.5 | 30.0% | Nov 14, 2023 | Microsoft Office Security Feature Bypass Vulnerability |
| CVE-2023-36410 | MEDIUM | 5.4 | 0.9% | Nov 14, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
Check if your code is affected by 2023 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now