Microsoft Luki w zabezpieczeniach

Oś czasu

Wersja

2.1	3
2.2	3
6.5.0	2
6.5.1	2
6.5.2	2

Przeciwdziałanie

Official Fix	31
Temporary Fix	0
Workaround	1
Unavailable	0
Not Defined	13

Wykorzystywanie

High	1
Functional	0
Proof-of-Concept	2
Unproven	4
Not Defined	38

Wektor dostępu

Not Defined	0
Physical	0
Local	10
Adjacent	2
Network	33

Uwierzytelnianie

Not Defined	0
High	4
Low	18
None	23

Interakcja z użytkownikiem

Not Defined	0
Required	17
None	28

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	3
≤5	11
≤6	8
≤7	5
≤8	9
≤9	5
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	3
≤5	12
≤6	7
≤7	5
≤8	10
≤9	4
≤10	4

VulDB

≤1	0
≤2	0
≤3	3
≤4	8
≤5	6
≤6	7
≤7	7
≤8	6
≤9	5
≤10	3

NVD

≤1	0
≤2	0
≤3	0
≤4	1
≤5	2
≤6	7
≤7	3
≤8	5
≤9	2
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	0
≤6	0
≤7	4
≤8	12
≤9	2
≤10	1

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	1
≤8	1
≤9	1
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	9
<2k	6
<5k	12
<10k	7
<25k	10
<50k	1
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	31
<2k	5
<5k	3
<10k	5
<25k	1
<50k	0
<100k	0
≥100k	0

Affected Versions (112): 1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.4, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 2.0, 2.1, 2.2, 2.8, 3.0, 4.0, 4.1, 4.2, 4.3, 4.4, 4.5, 4.6, 4.7, 4.8, 4.9, 4.10, 4.11, 4.12, 4.13, 4.14, 4.15, 4.16, 4.17, 4.18, 4.19, 4.20, 4.21, 4.22, 4.23, 4.24, 4.25, 4.26, 4.27, 4.28, 4.29, 4.30, 4.31, 4.32, 4.33, 4.34, 4.35, 4.36, 4.37, 4.38, 4.39, 4.40, 4.41, 4.42, 4.43, 4.44, 4.45, 4.46, 4.47, 4.48, 4.49, 4.50, 4.51, 4.52, 4.53, 4.54, 4.55, 4.56, 4.57, 4.58, 4.59, 4.60.1, 4.60.2, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 7, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.5.3, 7.5.4, 8.0, 8.6(1.2), 8.6(1.9), 9.0, 9.1, 10.0, 10.1, 10.1.1, 10.1.2, 10.1.3, 10.2, 11.0, 2011

Typ oprogramowania: Software Library

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-04-17	3.9	3.8	AzureAD microsoft-authentication-library-for-dotnet nieznana luka	$0-$5k	$0-$5k	Not Defined	Official Fix	0.13	CVE-2024-27086
2024-02-21	8.5	8.3	discourse-microsoft-auth microsoft_auth:revoke privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-46241
2024-02-15	7.8	7.8	ESET NOD32 Antivirus privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2024-0353
2024-01-31	4.7	4.7	ESET Endpoint Security privilege escalation	$0-$5k	$0-$5k	Not Defined	Not Defined	0.05	CVE-2023-7043
2024-01-09	7.4	7.3	Microsoft.IdentityModel.Protocols.SignedHttpRequest privilege escalation	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2024-21643
2024-01-09	6.4	6.3	SAP GUI Connector for Microsoft Edge information disclosure	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.07	CVE-2024-22125
2023-12-21	6.6	6.6	ESET NOD32 Antivirus weak authentication	$0-$5k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-5594
2023-12-12	6.8	6.2	Microsoft Microsoft Malware Protection Platform Defender denial of service	$5k-$25k	$0-$5k	Unproven	Official Fix	0.02	CVE-2023-36010
2023-11-30	5.1	5.1	SpreadsheetConverter Import Spreadsheets from Microsoft Excel Plugin cross site scripting	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-48289
2023-11-14	8.8	8.1	Microsoft Microsoft OLE DB Provider for DB2 V7 Remote Code Execution	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2023-38151

35 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 35 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you need the next level of professionalism?

Upgrade your account now!