Microsoft الثغرات

التسلسل الزمني

النوع

منتج

Microsoft Windows5292
Microsoft Internet Explorer1827
Microsoft Edge843
Microsoft Office529
Microsoft Excel220

معالجة

Official Fix10222
Temporary Fix0
Workaround361
Unavailable127
Not Defined598

قابلية الاستغلال

High288
Functional83
Proof-of-Concept2499
Unproven2041
Not Defined6397

متجه الوصول

Not Defined0
Physical48
Local1754
Adjacent239
Network9267

توثيق

Not Defined0
High283
Low4033
None6992

تفاعل المستخدم

Not Defined0
Required4256
None7052

C3BM Index

CVSSv3 Base

≤10
≤20
≤316
≤4419
≤51247
≤62261
≤72592
≤82963
≤91079
≤10731

CVSSv3 Temp

≤10
≤20
≤356
≤4572
≤51708
≤62980
≤73190
≤81793
≤9569
≤10440

VulDB

≤10
≤22
≤3109
≤4692
≤51368
≤61755
≤73456
≤82069
≤91104
≤10753

NVD

≤10
≤20
≤39
≤446
≤5303
≤6746
≤7442
≤82270
≤9527
≤10106

CNA

≤10
≤20
≤32
≤44
≤547
≤685
≤7182
≤8370
≤9143
≤1014

المجهز

≤10
≤20
≤316
≤458
≤5830
≤6578
≤7735
≤81927
≤9394
≤1074

Research

≤10
≤20
≤30
≤40
≤50
≤61
≤70
≤81
≤91
≤100

إكسبلويت ذات هجوم فوري

<1k14
<2k15
<5k228
<10k704
<25k2706
<50k2733
<100k4097
≥100k811

إكسبلويت اليوم

<1k4790
<2k616
<5k1384
<10k1880
<25k2518
<50k95
<100k25
≥100k0

حجم سوق الإكسبلويت

🔴 CTI النشاطات

Affected Products (458): .NET (14), .NET Core (23), .NET Core SDK (1), .NET Education Bundle SDK Install Tool (1), .NET Framework (122), .NET Install Tool for Extension Authors (1), 3D Builder (14), 3D Viewer (7), 4K Wireless Display Adapter (1), 365 Apps for Enterprise (16), @azure-ms-rest-nodeauth (1), ADAL.NET (1), ADAM (1), ASP.NET (16), ASP.NET Core (25), ASP.NET Core MVC (2), ASP.NET MVC (1), ASP .NET SignalR (1), AV1 Video Extension (4), Access (14), Accessibility Insights (1), Accessibility Insights for Web (1), Accounts (1), Active Directory Federation Services (1), Active Movie Control (1), ActiveSync (4), ActiveX (2), Agent (1), Anti-cross Site Scripting Library (1), App Installer (1), Application Inspector (1), Atlas framework (1), Authentication Library (1), AutoUpdate for Mac (1), Azure AD Connect (1), Azure ARC (1), Azure Active Directory (1), Azure Active Directory Connect (2), Azure Active Directory Passport (1), Azure App Service (2), Azure Arc-enabled Kubernetes Cluster (1), Azure Automation (2), Azure Automation State Configuration (1), Azure Automation Update Management (1), Azure Batch (1), Azure CLI (2), Azure Container Instance (1), Azure CycleCloud (3), Azure Data Explorer (1), Azure DevOps Server (27), Azure Diagnostics (1), Azure EFLOW (1), Azure Functions (1), Azure Guest Configuration (1), Azure IoT CLI Extension (1), Azure IoT Edge (2), Azure IoT SDK (1), Azure Kubernetes Service (4), Azure Linux Guest Agent (1), Azure Migrate (1), Azure Network Watcher VM Extension (1), Azure Open Management Infrastructure (5), Azure Pack Rollup (1), Azure RTOS (6), Azure RTOS GUIX (1), Azure RTOS GUIX Studio (1), Azure RTOS USBX (2), Azure Real Time Operating System GUIX Studio (8), Azure SDK for .NET (1), Azure SDK for Java (1), Azure SSH Keypairs (1), Azure Security Center (1), Azure Sentinel (1), Azure Service Fabric (3), Azure Service Fabric Explorer (1), Azure Site Recovery (1), Azure Site Recovery VMWare to Azure (80), Azure Sphere (30), Azure Spring Cloud (1), Azure Stack (1), Azure Stack Edge (1), Azure Stack Hub (1), Azure StorSimple 8000 (1), Azure Storage Blobs Client Library (2), BackOffice (1), Backoffice (1), Backoffice Resource Kit (1), Baseline Security Analyzer (2), Bing (1), Bing Search (2), BizTalk ESB Toolkit (1), BizTalk Server (1), Biztalk Server (2), Bond (1), Bot Framework SDK (2), Business Productivity Servers (1), C SDK for Azure IoT (2), Cabarc (1), ChakraCore (207), Chakra Core (5), Chess Titan (1), Clarity (1), Class Package Export Tool (1), Clip Art Gallery (1), Commerce Server (6), Commercial Internet System (2), Common Utilities (1), Compiled HTML Help (1), Container Monitoring Solution (1), Content Management Server (6), Data.OData (1), Data Access Component Internet Publishing Provider (1), Data Access Components (7), Debug Diagnostic Tool (1), Defender (1), Defender Antimalware Platform (1), Defender for Endpoint (4), Defender for IoT (12), Desktop Client for Mac (1), Diagnostics Troubleshooting Wizard (1), Digital Image (1), DirectX (8), DirectX Files Viewer Control (1), DirectX Media (1), Directx (1), Dynamics (1), Dynamics 365 (32), Dynamics 365 BC On Premise (2), Dynamics 365 Business Central (9), Dynamics 365 Commerce (1), Dynamics 365 Customer Engagement (1), Dynamics 365 Field Service (1), Dynamics 365 for Finance (2), Dynamics 365 for Finance and Operations (3), Dynamics 365 on-premises (1), Dynamics AX (2), Dynamics CRM (4), Dynamics GP (9), Dynamics NAV (7), Edge (843), Endpoint Configuration Manager (1), Endpoint Protection (1), Enhanced Mitigation Experience Toolkit EMET (1), Enterprise Library (1), Entourage (2), Excel (220), Excel 2010 SP2 (1), Excel Viewer (2), Exchange (63), Exchange Server (121), Exchange Srv (1), Expression Design (1), Expression Media (1), FAST ESP (1), FSLogix (1), File Checksum Integrity Verifier (1), File Transfer Manager (2), Forefront Endpoint Protection (6), Forefront Security for Exchange Server (1), Forefront Threat Management Gateway (1), Forefront Unified Access Gateway (12), FrontPage (6), FrontPage Extensions (5), FrontPage Server Extensions (11), Frontpage (3), Frontpage Express (1), GitHub Pull Requests and Issues Extension (1), Groove (1), HEIF Image Extension (2), HEVC Video Extensions (41), HTML Help Workshop (2), Help Workshop (2), Host Integration Server (3), Hotmail (5), Hub Device Client SDK for Azure IoT (1), Hyper-V (13), Hyperlink Object Library (1), IE for Macintosh (1), IIS (190), ISA Proxy (1), ISA Server (31), Identity Manager (1), Index Server (5), Indexing Service (4), Infopath (2), Interactive Training (1), Internet Authentication Service Helper Com Component (1), Internet Explorer (1827), Internet Information Server (1), Internet Information Services (2), Internet Security And Acceleration Server (1), Intune Management Extension (2), Intune Portal (1), JET (1), JScript (1), Java SDK for Azure IoT (2), Java Virtual Machine (12), Jet (2), Jet Database Engine (4), Jupyter Extension for Visual Studio Code (1), Kubernetes Tools (1), Log Analytics Agent (1), Log Sink Class ActiveX control (1), Lync (21), Lync Server (12), Lync for Mac (1), MN-500 Wireless Base Station (2), MN-700 (1), MPEG-2 Video Extension (1), MS-DOS (1), MSDE (2), MSN (1), MSN Messenger (11), MSN Messenger Service for Exchange (1), MSRT (1), Mail Client (1), Malicious Software Removal Tool (2), Malware Protection Engine (11), Maven for Java Extension (1), Media Format Runtime (1), Media Player (5), Media Services (1), Messenger (3), Metadirectory Services (1), Microsoft (1), Microsoft .NET Framework (1), Microsoft Dynamics 365 (4), Microsoft Dynamics NAV 2015 (1), Microsoft Edge (1), Microsoft Exchange Server (6), Microsoft Photos (1), Money (2), Mono Framework (1), NET Framework (6), NetMeeting (7), Netmeeting (2), Network Monitor (2), Network Watcher Agent Virtual Machine Extension for Linux (1), Nokia Asha 501 (1), NuGet (2), Office (529), Office 365 (4), Office 365 ProPlus (1), Office App (1), Office Communicator (2), Office Compability Pack (1), Office Compatibility Pack (11), Office Converter Pack (1), Office Excel (4), Office InfoPath (1), Office Online Server (10), Office Picture Manager (1), Office Publisher (1), Office SharePoint Server (2), Office Snapshot Viewer ActiveX (1), Office Web Apps (10), Office Web Apps Server (7), Office Web Components (4), Office Word Viewer (2), Office for Mac 2011 (1), On-Premises Data Gateway (1), OneDrive (9), OneNote (4), Open Enclave SDK (3), Open XML File Format Converter (1), Operations (2), Organization Chart (1), Outlook (81), Outlook.com (1), Outlook Express (28), Outlook Express Book Control (1), Outlook Web Access (2), Outlook Web App (1), Package Manager Configurations (1), Paint 3D (4), Passport (1), Passport-SAML (1), Passport Manager (2), Passport SDK (6), Password SDK (1), Peachtree Accounting (1), Personal Firewall (2), Personal Web Server (1), PhoneBook Server (1), Plus! (1), Pocket Internet Explorer (1), Power Apps (1), Power Automate (1), Power BI (1), PowerBI-Client JS SDK (1), Power BI Report Server (5), PowerPoint (67), PowerPoint Viewer (5), PowerShell (1), PowerShell Core (1), PowerShell Editor Services (1), PowerShell Extension for Visual Studio Code (1), PowerShellGet (1), Powerpoint (5), Project (10), Project Server (4), Proxy Server (2), Publisher (20), Publisher 2003 (9), Quantum Development Kit for Visual Studio Code (1), RMS Sharing for Mac (1), RTOS GUIX (3), Raw Image Extension (11), Register Server (1), Remote Desktop Connection Client (1), Remote Desktop Connection Manager (1), Remote Desktop For Mac (1), Research JavaScript Cryptography Library (2), Rich Textbox Control (1), Rome SDK (2), SCS Add-on (1), SMS Console (1), SMS Server (1), SNA Server (1), SQL Server (90), SQL Server 2017 Reporting Services (1), SQL Server 2019 Reporting Services (1), SQL Server Management Studio (6), Secure Access (1), Security Essentials (9), Security Essentials Antimalware Engine (2), Service Fabric (1), Services (1), SharePoint (63), SharePoint Enterprise Server (131), SharePoint Foundation (61), SharePoint Server (183), SharePoint Services (1), SharePoint Team Services (1), Sharepoint (6), Sharepoint Portal Server (1), Silverlight (17), Site Server (11), Skype (14), Skype Extension (1), Skype for Android (1), Skype for Business (15), Skype for Business Server (9), Sterling Connect Direct (1), Surface Hub (1), Surface Pro (1), Sysinternals (1), Sysinternals PsExec (1), System Center (1), System Center Endpoint Protection (8), System Center Operations Manager (7), System Center Virtual Machine Manager (1), System Information ActiveX control (1), Systems Management (1), Systems Management Server (3), TSAC ActiveX Control (1), TSAC Activex Control (1), Team Foundation Server (23), Teams (5), Teams Admin Center (1), Tech Companion (1), Teredo (4), Terminal Server (2), URLScan (2), VBScript (1), VISIO (1), VP9 Video Extensions (6), Vfp Ole Server Activex Control (1), Virtual Machine (11), Virtual PC (4), Virtual Server (1), Visio (28), Visio Viewer (6), Visual Basic (10), Visual Basic Enterprise Edition (1), Visual C++ (1), Visual C++ Redistributable (1), Visual Database Tools Database Designer (1), Visual FoxPro (3), Visual InterDev (2), Visual Studio (92), Visual Studio .net (1), Visual Studio Code (38), Visual Studio Code Live Share Extension (1), Visual Studio Code Remote Containers Extension (1), Visual Studio Code WSL Extension (1), Visual Studio Community (1), Visual Studio Team Foundation Server (1), W3Who ISAPI (2), WMI Administrative Tools (1), WebDAV Mini-Redirector (1), Web Media Extensions (1), WebP Image Extension (1), Web Proxy (1), WebTV (2), Whale Communication IAG (1), Windows (5292), Windows-nt (1), Windows 10 Update Assistant (2), Windows Admin Center (1), Windows Azure Sdk (1), Windows Defender (8), Windows Digital Rights Management (1), Windows Embedded (1), Windows Essentials (1), Windows Event Viewer (1), Windows Explorer (2), Windows Host Compute (1), Windows Image Acquisition Logger (1), Windows Installer (1), Windows Live Messenger (7), Windows Live Movie Maker (1), Windows Live OneCare (1), Windows Live Onecare (2), Windows Mail (3), Windows Media Center (2), Windows Media Center TV Pack (1), Windows Media Encoder (1), Windows Media Format Runtime (1), Windows Media Player (38), Windows Media Rights Manager (1), Windows Media Services (6), Windows Messenger (2), Windows Mobile (7), Windows Mobile Pocket PC (1), Windows Modern Mail (1), Windows Movie Maker (2), Windows Phone (2), Windows Search (1), Windows Server (1), Windows SharePoint Services (1), Windows Subsystem for Linux (1), Windows Sysmon (1), Windows Upgrade Assistant (1), Wireless Desktop 2000 (1), Wireless Display Adapter V2 (1), Wireless Keyboard (2), Wireless Zero Configuration system (1), Word (135), Word 2003 (1), WordPad (1), WordPerfect (1), Word Viewer (4), Wordperfect Converter (1), Works (9), XML Core Services (13), Xamarin.Forms (1), Xbox 360 (2), Xbox Live (1), Xerte (1), YARP (1), Yammer (1), YourPhone App (1), Zune (1), antispyware (2), iis (2), winword (1), workspace-tools (1)

Link to Vendor Website: https://www.microsoft.com/

منشورBaseTempالثغرةProdق�معالجةCTIEPSSCVE
11/01/20235.75.5Microsoft Windows Local Session Manager الحرمان من الخدمةOperating SystemNot DefinedNot Defined0.150.00000CVE-2022-44684
10/01/20238.37.3Microsoft Windows Print Spooler Privilege EscalationOperating SystemUnprovenOfficial Fix0.050.00885CVE-2023-21765
10/01/20238.37.3Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.170.00885CVE-2023-21764
10/01/20238.37.3Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.200.00885CVE-2023-21763
10/01/20238.07.0Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.290.00885CVE-2023-21762
10/01/20236.45.5Microsoft Exchange Server الكشف عن المعلوماتGroupware SoftwareUnprovenOfficial Fix0.200.00885CVE-2023-21761
10/01/20238.07.0Microsoft Windows Print Spooler Privilege EscalationOperating SystemUnprovenOfficial Fix0.020.00885CVE-2023-21760
10/01/20233.83.4Microsoft Windows Smart Card Resource Management Server الكشف عن المعلوماتOperating SystemUnprovenOfficial Fix0.070.00885CVE-2023-21759
10/01/20237.56.5Microsoft Windows Internet Key Exchange الحرمان من الخدمةOperating SystemUnprovenOfficial Fix0.020.00885CVE-2023-21758
10/01/20237.56.5Microsoft Windows Layer 2 Tunneling Protocol الحرمان من الخدمةOperating SystemUnprovenOfficial Fix0.070.00885CVE-2023-21757
10/01/20238.37.3Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.020.00885CVE-2023-21755
10/01/20238.37.3Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.020.00885CVE-2023-21754
10/01/20234.94.3Microsoft Windows Event Tracing الكشف عن المعلوماتOperating SystemUnprovenOfficial Fix0.030.00885CVE-2023-21753
10/01/20238.07.0Microsoft Windows Backup Service Privilege EscalationOperating SystemUnprovenOfficial Fix0.720.00885CVE-2023-21752
10/01/20238.07.0Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.050.00885CVE-2023-21750
10/01/20238.37.3Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00885CVE-2023-21749
10/01/20238.37.3Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.050.00885CVE-2023-21748
10/01/20238.37.3Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.090.00885CVE-2023-21747
10/01/20238.37.3Microsoft Windows NTLM Privilege EscalationOperating SystemUnprovenOfficial Fix0.270.00885CVE-2023-21746
10/01/20238.47.4Microsoft Exchange Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.190.00885CVE-2023-21745
10/01/20238.87.7Microsoft SharePoint Server Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.180.01156CVE-2023-21744
10/01/20235.95.2Microsoft SharePoint Server ثغرات غير معروفةGroupware SoftwareUnprovenOfficial Fix0.580.00885CVE-2023-21743
10/01/20238.87.7Microsoft SharePoint Privilege EscalationGroupware SoftwareUnprovenOfficial Fix0.230.01156CVE-2023-21742
10/01/20236.75.8Microsoft Visio Privilege EscalationImage Processing SoftwareUnprovenOfficial Fix0.070.00885CVE-2023-21741
10/01/20237.36.3Microsoft Windows Bluetooth Driver Privilege EscalationOperating SystemUnprovenOfficial Fix0.070.00885CVE-2023-21739
10/01/20236.75.8Microsoft Visio Remote Code ExecutionImage Processing SoftwareUnprovenOfficial Fix0.110.01103CVE-2023-21738
10/01/20237.06.1Microsoft Visio Remote Code ExecutionImage Processing SoftwareUnprovenOfficial Fix0.140.01103CVE-2023-21737
10/01/20237.06.1Microsoft Visio Remote Code ExecutionImage Processing SoftwareUnprovenOfficial Fix0.050.01103CVE-2023-21736
10/01/20237.06.1Microsoft Office Remote Code ExecutionOffice Suite SoftwareUnprovenOfficial Fix0.050.01103CVE-2023-21735
10/01/20237.06.1Microsoft Office Remote Code ExecutionOffice Suite SoftwareUnprovenOfficial Fix0.070.01103CVE-2023-21734
10/01/20237.36.3Microsoft Windows Bind Filter Driver Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00885CVE-2023-21733
10/01/20238.87.7Microsoft Windows ODBC Driver Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.220.01156CVE-2023-21732
10/01/20238.37.3Microsoft Windows Cryptographic Services Privilege EscalationOperating SystemUnprovenOfficial Fix0.190.00885CVE-2023-21730
10/01/20237.56.5Microsoft Windows Netlogon الحرمان من الخدمةOperating SystemUnprovenOfficial Fix0.070.00885CVE-2023-21728
10/01/20238.37.3Microsoft Windows Credential Manager User Interface Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00885CVE-2023-21726
10/01/20236.96.0Microsoft Malicious Software Removal Tool Privilege Escalationغير معروفUnprovenOfficial Fix0.110.00885CVE-2023-21725
10/01/20238.37.3Microsoft Windows DWM Core Library Privilege EscalationOperating SystemUnprovenOfficial Fix0.110.00885CVE-2023-21724
10/01/20237.56.5Microsoft Windows Internet Key Exchange الحرمان من الخدمةOperating SystemUnprovenOfficial Fix0.060.00885CVE-2023-21683
10/01/20235.34.6Microsoft Windows Point-to-Point Protocol الكشف عن المعلوماتOperating SystemUnprovenOfficial Fix0.050.00885CVE-2023-21682
10/01/20238.87.7Microsoft Windows WDAC OLE DB Provider for SQL Server Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.160.01156CVE-2023-21681
10/01/20238.37.3Microsoft Windows Win32k Privilege EscalationOperating SystemUnprovenOfficial Fix0.050.00885CVE-2023-21680
10/01/20238.17.1Microsoft Windows Layer 2 Tunneling Protocol Remote Code ExecutionOperating SystemUnprovenOfficial Fix0.060.01156CVE-2023-21679
10/01/20238.37.3Microsoft Windows Print Spooler Privilege EscalationOperating SystemUnprovenOfficial Fix0.110.00885CVE-2023-21678
10/01/20237.56.5Microsoft Windows Internet Key Exchange الحرمان من الخدمةOperating SystemUnprovenOfficial Fix0.030.00885CVE-2023-21677
10/01/20238.87.7Microsoft Windows Lightweight Directory Access Protocol Privilege EscalationOperating SystemUnprovenOfficial Fix0.060.01156CVE-2023-21676
10/01/20238.37.3Microsoft Windows Kernel Privilege EscalationOperating SystemUnprovenOfficial Fix0.030.00885CVE-2023-21675
10/01/20239.48.7Microsoft Windows Advanced Local Procedure Call Privilege EscalationOperating SystemFunctionalOfficial Fix1.780.00885CVE-2023-21674
10/01/20236.85.9Microsoft Windows BitLocker Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.120.00885CVE-2023-21563
10/01/20239.48.2Microsoft Windows Cryptographic Services Privilege EscalationOperating SystemUnprovenOfficial Fix0.200.00885CVE-2023-21561
10/01/20236.65.8Microsoft Windows Boot Manager Local Privilege EscalationOperating SystemUnprovenOfficial Fix0.160.00885CVE-2023-21560

11258 بعض الادخالات لم يتم عرضها

Want to stay up to date on a daily basis?

Enable the mail alert feature now!