VULN/vuln-microsoft
1
0
Fork 0
Code Pull Requests Actions Activity
Files
main
vuln-microsoft/data/cvrf/2023/2023-Aug.json
T

2 lines
1.7 MiB
Plaintext
Raw Permalink Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-74-microsoft-cves-and-2-advisories\">This release consists of the following 74 Microsoft CVEs, and 2 advisories:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Microsoft Office</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230003\">ADV230003</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Memory Integrity System Readiness Scan Tool</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV230004\">ADV230004</a></td>\n<td></td>\n<td></td>\n<td>Exploitation Detected</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21709\">CVE-2023-21709</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29328\">CVE-2023-29328</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Teams</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-29330\">CVE-2023-29330</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35359\">CVE-2023-35359</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35368\">CVE-2023-35368</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Excel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35371\">CVE-2023-35371</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Visio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35372\">CVE-2023-35372</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35376\">CVE-2023-35376</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35377\">CVE-2023-35377</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Projected File System</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35378\">CVE-2023-35378</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Reliability Analysis Metrics Calculation Engine</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35379\">CVE-2023-35379</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35380\">CVE-2023-35380</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Fax and Scan Service</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35381\">CVE-2023-35381</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35382\">CVE-2023-35382</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35383\">CVE-2023-35383</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows HTML Platform</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35384\">CVE-2023-35384</a></td>\n<td>5.4</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35385\">CVE-2023-35385</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35386\">CVE-2023-35386</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Bluetooth A2DP driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35387\">CVE-2023-35387</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35388\">CVE-2023-35388</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35389\">CVE-2023-35389</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Core</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35390\">CVE-2023-35390</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>ASP.NET and Visual Studio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35391\">CVE-2023-35391</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure HDInsights</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35393\">CVE-2023-35393</a></td>\n<td>4.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure HDInsights</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35394\">CVE-2023-35394</a></td>\n<td>4.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Visio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36865\">CVE-2023-36865</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Visio</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36866\">CVE-2023-36866</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36869\">CVE-2023-36869</a></td>\n<td>6.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Framework</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36873\">CVE-2023-36873</a></td>\n<td>7.4</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Reliability Analysis Metrics Calculation Engine</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36876\">CVE-2023-36876</a></td>\n<td>7.1</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure HDInsights</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36877\">CVE-2023-36877</a></td>\n<td>4.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure HDInsights</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36881\">CVE-2023-36881</a></td>\n<td>4.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft WDAC OLE DB provider for SQL</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36882\">CVE-2023-36882</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Group Policy</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36889\">CVE-2023-36889</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36890\">CVE-2023-36890</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36891\">CVE-2023-36891</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36892\">CVE-2023-36892</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Outlook</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36893\">CVE-2023-36893</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office SharePoint</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36894\">CVE-2023-36894</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Outlook</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36895\">CVE-2023-36895</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Excel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36896\">CVE-2023-36896</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36897\">CVE-2023-36897</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Tablet Windows User Interface</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36898\">CVE-2023-36898</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>ASP.NET</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36899\">CVE-2023-36899</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Common Log File System Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36900\">CVE-2023-36900</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows System Assessment Tool</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36903\">CVE-2023-36903</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cloud Files Mini Filter Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36904\">CVE-2023-36904</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Wireless Wide Area Network Service</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36905\">CVE-2023-36905</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cryptographic Services</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36906\">CVE-2023-36906</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cryptographic Services</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36907\">CVE-2023-36907</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Role: Windows Hyper-V</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36908\">CVE-2023-36908</a></td>\n<td>5.7</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36909\">CVE-2023-36909</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36910\">CVE-2023-36910</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36911\">CVE-2023-36911</a></td>\n<td>9.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36912\">CVE-2023-36912</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36913\">CVE-2023-36913</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Smart Card</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36914\">CVE-2023-36914</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38154\">CVE-2023-38154</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Unlikely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38157\">CVE-2023-38157</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Dynamics Business Central Control</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38167\">CVE-2023-38167</a></td>\n<td>7.2</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>SQL Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38169\">CVE-2023-38169</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows Codecs Library</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38170\">CVE-2023-38170</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38172\">CVE-2023-38172</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Defender</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38175\">CVE-2023-38175</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Arc</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38176\">CVE-2023-38176</a></td>\n<td>7.0</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>.NET Core</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38178\">CVE-2023-38178</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>ASP .NET</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38180\">CVE-2023-38180</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38181\">CVE-2023-38181</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38182\">CVE-2023-38182</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows LDAP - Lightweight Directory Access Protocol</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38184\">CVE-2023-38184</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Exchange Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38185\">CVE-2023-38185</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Mobile Device Management</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38186\">CVE-2023-38186</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure HDInsights</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38188\">CVE-2023-38188</a></td>\n<td>4.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Message Queuing</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38254\">CVE-2023-38254</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-12-non-microsoft-cves\">We are republishing 12 non-Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>Tag</th>\n<th>CVE</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Advanced Micro Devices Inc.</td>\n<td>Microsoft Windows</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-20569\">CVE-2023-20569</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4068\">CVE-2023-4068</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4069\">CVE-2023-4069</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4070\">CVE-2023-4070</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4071\">CVE-2023-4071</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4072\">CVE-2023-4072</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4073\">CVE-2023-4073</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4074\">CVE-2023-4074</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4075\">CVE-2023-4075</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4076\">CVE-2023-4076</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4077\">CVE-2023-4077</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-4078\">CVE-2023-4078</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href=\"https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e\">4522133</a> for more information.</li>\n</ul>\n<h2 id=\"known-issues\">Known Issues</h2>\n<p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p>\n<p>For more information about Windows Known Issues, please see <a href=\"https://docs.microsoft.com/en-us/windows/release-information/windows-message-center\">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p>\n<table>\n<thead>\n<tr>\n<th>KB Article</th>\n<th>Applies To</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5002398\">5002398</a></td>\n<td>SharePoint Enterprise Server 2016 Language Pack</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5002422\">5002422</a></td>\n<td>SharePoint Server 2019 Language Pack</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5002436\">5002436</a></td>\n<td>SharePoint Server 2019</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5002437\">5002437</a></td>\n<td>SharePoint Server Subscription Edition</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5002453\">5002453</a></td>\n<td>SharePoint Enterprise Server 2016</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029244\">5029244</a></td>\n<td>Windows 10, version 21H2, Windows 10, version 22H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029247\">5029247</a></td>\n<td>Windows 10, version 1809, Windows Server 2019</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029250\">5029250</a></td>\n<td>Windows Server 2022</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029263\">5029263</a></td>\n<td>Windows 11, version 22H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029296\">5029296</a></td>\n<td>Windows Server 2008 R2 (Monthly Rollup)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029301\">5029301</a></td>\n<td>Windows Server 2008 (Security-only update)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029307\">5029307</a></td>\n<td>Windows Server 2008 R2 (Security-only update)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029318\">5029318</a></td>\n<td>Windows Server 2008 (Monthly Rollup)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029388\">5029388</a></td>\n<td>Exchange Server 2019, and 2016</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5029497\">5029497</a></td>\n<td>Visual Studio 2010 Tools for Office Runtime</td>\n</tr>\n</tbody>\n</table>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"August 2023 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-10-30T01:43:44","Identification":{"Alias":{"Value":"2023-Aug"},"ID":{"Value":"2023-Aug"}},"InitialReleaseDate":"2023-08-08T00:00:00","RevisionHistory":[{"Date":"2026-10-30T01:43:44","Description":{"Value":"August 2023 Security Updates"},"Number":"225"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"11655","Value":"Microsoft Edge (Chromium-based)"}],"Name":"Browser","Type":1},{"Items":[{"ProductID":"12038","Value":"Microsoft Exchange Server 2019 Cumulative Update 12"},{"ProductID":"12039","Value":"Microsoft Exchange Server 2016 Cumulative Update 23"},{"ProductID":"12191","Value":"Microsoft Exchange Server 2019 Cumulative Update 13"}],"Name":"Server Software","Type":1},{"Items":[{"ProductID":"11568","Value":"Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"11569","Value":"Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"11570","Value":"Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"11571","Value":"Windows Server 2019"},{"ProductID":"11572","Value":"Windows Server 2019 (Server Core installation)"},{"ProductID":"11923","Value":"Windows Server 2022"},{"ProductID":"11924","Value":"Windows Server 2022 (Server Core installation)"},{"ProductID":"11926","Value":"Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"11927","Value":"Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"11929","Value":"Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"11930","Value":"Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"11931","Value":"Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"12085","Value":"Windows 11 Version 22H2 for ARM64-based Systems"},{"ProductID":"12086","Value":"Windows 11 Version 22H2 for x64-based Systems"},{"ProductID":"12097","Value":"Windows 10 Version 22H2 for x64-based Systems"},{"ProductID":"12098","Value":"Windows 10 Version 22H2 for ARM64-based Systems"},{"ProductID":"12099","Value":"Windows 10 Version 22H2 for 32-bit Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"ProductID":"12010","Value":"HEVC Video Extension"},{"ProductID":"11808","Value":"HEVC Video Extensions"},{"ProductID":"12221","Value":"Memory Integrity System Readiness Scan Tool"}],"Name":"Windows","Type":1},{"Items":[{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"}],"Name":"ESU","Type":1},{"Items":[{"ProductID":"11573","Value":"Microsoft Office 2019 for 32-bit editions"},{"ProductID":"11574","Value":"Microsoft Office 2019 for 64-bit editions"},{"ProductID":"11952","Value":"Microsoft Office LTSC 2021 for 64-bit editions"},{"ProductID":"11762","Value":"Microsoft 365 Apps for Enterprise for 32-bit Systems"},{"ProductID":"11763","Value":"Microsoft 365 Apps for Enterprise for 64-bit Systems"},{"ProductID":"11953","Value":"Microsoft Office LTSC 2021 for 32-bit editions"},{"ProductID":"10744","Value":"Microsoft Visio 2016 (64-bit edition)"},{"ProductID":"10743","Value":"Microsoft Visio 2016 (32-bit edition)"},{"ProductID":"10800","Value":"Microsoft Project 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10801","Value":"Microsoft Project 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"11742","Value":"Microsoft Publisher 2013 Service Pack 1 RT"},{"ProductID":"10692","Value":"Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10693","Value":"Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10694","Value":"Microsoft PowerPoint 2013 RT Service Pack 1"},{"ProductID":"10725","Value":"Microsoft Visio 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10726","Value":"Microsoft Visio 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10739","Value":"Microsoft Excel 2016 (32-bit edition)"},{"ProductID":"10740","Value":"Microsoft Excel 2016 (64-bit edition)"},{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"ProductID":"10741","Value":"Microsoft PowerPoint 2016 (32-bit edition)"},{"ProductID":"10742","Value":"Microsoft PowerPoint 2016 (64-bit edition)"},{"ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"ProductID":"10749","Value":"Microsoft Publisher 2016 (32-bit edition)"},{"ProductID":"10750","Value":"Microsoft Publisher 2016 (64-bit edition)"},{"ProductID":"10760","Value":"Microsoft Project 2016 (32-bit edition)"},{"ProductID":"10761","Value":"Microsoft Project 2016 (64-bit edition)"},{"ProductID":"10656","Value":"Microsoft Excel 2013 RT Service Pack 1"},{"ProductID":"10654","Value":"Microsoft Excel 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10655","Value":"Microsoft Excel 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10603","Value":"Microsoft Office 2013 RT Service Pack 1"},{"ProductID":"10601","Value":"Microsoft Office 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10602","Value":"Microsoft Office 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10609","Value":"Microsoft Publisher 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10610","Value":"Microsoft Publisher 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"11575","Value":"Microsoft Office 2019 for Mac"},{"ProductID":"11605","Value":"Microsoft Office Online Server"},{"ProductID":"11951","Value":"Microsoft Office LTSC for Mac 2021"},{"ProductID":"12182","Value":"Microsoft Teams for Desktop"},{"ProductID":"12007","Value":"Microsoft Teams for Android"},{"ProductID":"12216","Value":"Microsoft Teams for Mac"},{"ProductID":"11858","Value":"Microsoft Teams for iOS"},{"ProductID":"11585","Value":"Microsoft SharePoint Server 2019"},{"ProductID":"11961","Value":"Microsoft SharePoint Server Subscription Edition"},{"ProductID":"10765","Value":"Microsoft Outlook 2016 (32-bit edition)"},{"ProductID":"10766","Value":"Microsoft Outlook 2016 (64-bit edition)"},{"ProductID":"10810","Value":"Microsoft Outlook 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10811","Value":"Microsoft Outlook 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10407","Value":"Microsoft Outlook 2013 RT Service Pack 1"},{"ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"ProductID":"10762","Value":"Microsoft OneNote 2016 (32-bit edition)"},{"ProductID":"10763","Value":"Microsoft OneNote 2016 (64-bit edition)"},{"ProductID":"10793","Value":"Microsoft OneNote 2013 Service Pack 1 (32-bit editions)"},{"ProductID":"10794","Value":"Microsoft OneNote 2013 Service Pack 1 (64-bit editions)"},{"ProductID":"10795","Value":"Microsoft OneNote 2013 RT Service Pack 1"}],"Name":"Microsoft Office","Type":1},{"Items":[{"ProductID":"11650-10852","Value":"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"11650-10853","Value":"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"11650-10816","Value":"Microsoft .NET Framework 4.8 on Windows Server 2016"},{"ProductID":"11650-10855","Value":"Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)"},{"ProductID":"11650-10051","Value":"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"11650-10049","Value":"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"11650-10378","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012"},{"ProductID":"11650-10379","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)"},{"ProductID":"11650-10483","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012 R2"},{"ProductID":"11650-10543","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"11676-11568","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"11676-11569","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"11676-11571","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019"},{"ProductID":"11676-11572","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)"},{"ProductID":"11676-11923","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022"},{"ProductID":"11676-11924","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)"},{"ProductID":"11676-11926","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"11676-11927","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"11676-11929","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"11676-11930","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"11676-11931","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"11676-12097","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems"},{"ProductID":"11676-12098","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems"},{"ProductID":"11676-12099","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems"},{"ProductID":"11677-11568","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"11677-11569","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"11677-11570","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"11677-11571","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019"},{"ProductID":"11677-11572","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)"},{"ProductID":"11723-10852","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"11723-10853","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"11723-10816","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016"},{"ProductID":"11723-10855","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)"},{"ProductID":"11863-10051","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"11863-10049","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"11863-10378","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012"},{"ProductID":"11863-10379","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)"},{"ProductID":"11863-10483","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2"},{"ProductID":"11863-10543","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"12079-11923","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022"},{"ProductID":"12079-11924","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation)"},{"ProductID":"12079-11926","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"12079-11927","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"12079-11929","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"12079-11930","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"12079-11931","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"12079-12085","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems"},{"ProductID":"12079-12086","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems"},{"ProductID":"12079-12097","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems"},{"ProductID":"12079-12098","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems"},{"ProductID":"12079-12099","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems"},{"ProductID":"12115-9312","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"12115-10287","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"12115-9318","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"12115-9344","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"ProductID":"12128-10729","Value":"Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for 32-bit Systems"},{"ProductID":"12128-10735","Value":"Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for x64-based Systems"},{"ProductID":"11676-11570","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"9292-9318","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9292-9312","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"12211","Value":"Azure DevOps Server 2019.1.2"},{"ProductID":"12143","Value":"Azure DevOps Server 2020.1.2"},{"ProductID":"11675","Value":"Azure DevOps Server 2019.0.1"},{"ProductID":"11600","Value":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)"},{"ProductID":"12051","Value":"Microsoft Visual Studio 2022 version 17.2"},{"ProductID":"11935","Value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"ProductID":"12129","Value":"Microsoft Visual Studio 2022 version 17.4"},{"ProductID":"12187","Value":"Microsoft Visual Studio 2022 version 17.6"},{"ProductID":"12215","Value":"Visual Studio 2010 Tools for Office Runtime"},{"ProductID":"12009","Value":".NET 6.0"},{"ProductID":"12130","Value":".NET 7.0"},{"ProductID":"11564","Value":"ASP.NET Core 2.1"}],"Name":"Developer Tools","Type":1},{"Items":[{"ProductID":"11664","Value":"Microsoft Dynamics 365 (on-premises) version 9.0"},{"ProductID":"12219","Value":"Microsoft Dynamics 365 Business Central 2023 Release Wave 1"}],"Name":"Microsoft Dynamics","Type":1},{"Items":[{"ProductID":"11987","Value":"Azure HDInsight"},{"ProductID":"12218","Value":"Azure Virtual Machines"},{"ProductID":"12189","Value":"Azure DevOps Server 2022.0.1"},{"ProductID":"12217","Value":"Azure Arc-Enabled Servers"}],"Name":"Azure","Type":1},{"Items":[{"ProductID":"11744","Value":"Windows Defender Antimalware Platform"}],"Name":"System Center","Type":1},{"Items":[{"ProductID":"12180","Value":"Microsoft OLE DB Driver 19 for SQL Server"},{"ProductID":"12181","Value":"Microsoft OLE DB Driver 18 for SQL Server"},{"ProductID":"12197","Value":"Microsoft ODBC Driver 18 for SQL Server on Linux"},{"ProductID":"12195","Value":"Microsoft ODBC Driver 17 for SQL Server on MacOS"},{"ProductID":"12185","Value":"Microsoft SQL Server 2022 for x64-based Systems (CU 5)"},{"ProductID":"12194","Value":"Microsoft ODBC Driver 17 for SQL Server on Linux"},{"ProductID":"12198","Value":"Microsoft ODBC Driver 18 for SQL Server on MacOS"},{"ProductID":"12184","Value":"Microsoft SQL Server 2019 for x64-based Systems (CU 21)"},{"ProductID":"12193","Value":"Microsoft ODBC Driver 17 for SQL Server on Windows"},{"ProductID":"12196","Value":"Microsoft ODBC Driver 18 for SQL Server on Windows"}],"Name":"SQL Server","Type":1},{"Items":[{"ProductID":"12139","Value":"CBL Mariner 2.0 x64"},{"ProductID":"12140","Value":"CBL Mariner 2.0 ARM"},{"ProductID":"12137","Value":"CBL Mariner 1.0 x64"},{"ProductID":"12138","Value":"CBL Mariner 1.0 ARM"},{"ProductID":"18324-16823","Value":"cbl2 wireshark 4.0.8-1 on CBL Mariner 2.0"},{"ProductID":"18335-16823","Value":"cbl2 krb5 1.19.4-2 on CBL Mariner 2.0"},{"ProductID":"18323-16823","Value":"cbl2 frr 8.5.3-2 on CBL Mariner 2.0"},{"ProductID":"18239-16823","Value":"cbl2 postgresql 14.10-1 on CBL Mariner 2.0"},{"ProductID":"17386-16823","Value":"cbl2 python3 3.9.19-1 on CBL Mariner 2.0"},{"ProductID":"17832-16823","Value":"cbl2 kernel 5.15.126.1-1 on CBL Mariner 2.0"},{"ProductID":"17375-16823","Value":"cbl2 golang 1.21.6-1 on CBL Mariner 2.0"},{"ProductID":"18148-16823","Value":"cbl2 msft-golang 1.19.12-1 on CBL Mariner 2.0"},{"ProductID":"18149-16823","Value":"cbl2 golang 1.19.12-1 on CBL Mariner 2.0"},{"ProductID":"18150-17084","Value":"azl3 golang 1.19.12-1 on Azure Linux 3.0"},{"ProductID":"18827-17084","Value":"azl3 libsass 3.6.6-1 on Azure Linux 3.0"},{"ProductID":"18365-16823","Value":"cbl2 binutils 2.37-10 on CBL Mariner 2.0"},{"ProductID":"18535-17084","Value":"azl3 qemu 6.2.0-18 on Azure Linux 3.0"},{"ProductID":"19514-16823","Value":"cbl2 binutils 2.37-9 on CBL Mariner 2.0"},{"ProductID":"18838-17084","Value":"azl3 openmpi 4.1.7-2 on Azure Linux 3.0"},{"ProductID":"18839-17084","Value":"azl3 hwloc 2.9.2-2 on Azure Linux 3.0"},{"ProductID":"19517-16823","Value":"cbl2 file 5.40-3 on CBL Mariner 2.0"},{"ProductID":"19178-16823","Value":"cbl2 json-c 0.15-2 on CBL Mariner 2.0"},{"ProductID":"19187-16823","Value":"cbl2 python-gevent 21.1.2-1 on CBL Mariner 2.0"},{"ProductID":"19188-16823","Value":"cbl2 libssh2 1.9.0-3 on CBL Mariner 2.0"},{"ProductID":"16914-17084","Value":"azl3 zziplib 0.13.74-1 on Azure Linux 3.0"},{"ProductID":"19206-17084","Value":"azl3 gsl 2.8-1 on Azure Linux 3.0"},{"ProductID":"18844-17084","Value":"azl3 crash 8.0.4-4 on Azure Linux 3.0"},{"ProductID":"18344-17084","Value":"azl3 crash 8.0.4-3 on Azure Linux 3.0"},{"ProductID":"19515-16823","Value":"cbl2 gdb 11.2-5 on CBL Mariner 2.0"},{"ProductID":"18015-17084","Value":"azl3 busybox 1.36.1-11 on Azure Linux 3.0"},{"ProductID":"18416-17084","Value":"azl3 libqb 2.0.8-1 on Azure Linux 3.0"},{"ProductID":"18331-16823","Value":"cbl2 mdadm 4.1-10 on CBL Mariner 2.0"},{"ProductID":"18332-17084","Value":"azl3 mdadm 4.2-1 on Azure Linux 3.0"},{"ProductID":"18160-16823","Value":"cbl2 qemu 6.2.0-23 on CBL Mariner 2.0"},{"ProductID":"18233-17084","Value":"azl3 qemu 8.2.0-1 on Azure Linux 3.0"},{"ProductID":"17454-16823","Value":"cbl2 nodejs 16.20.2-2 on CBL Mariner 2.0"},{"ProductID":"17866-16823","Value":"cbl2 nodejs18 18.17.1-2 on CBL Mariner 2.0"},{"ProductID":"18133-16823","Value":"cbl2 python-tensorboard 2.11.0-2 on CBL Mariner 2.0"},{"ProductID":"17871-17084","Value":"azl3 grpc 1.62.0-2 on Azure Linux 3.0"},{"ProductID":"18333-16823","Value":"cbl2 qt5-qtbase 5.12.11-9 on CBL Mariner 2.0"},{"ProductID":"19269-17084","Value":"azl3 php 8.3.19-1 on Azure Linux 3.0"},{"ProductID":"18329-16823","Value":"cbl2 php 8.1.22-1 on CBL Mariner 2.0"},{"ProductID":"17953-16823","Value":"cbl2 rust 1.72.0-2 on CBL Mariner 2.0"},{"ProductID":"18336-16823","Value":"cbl2 rubygem-protocol-http1 0.15.1-1 on CBL Mariner 2.0"},{"ProductID":"18327-16823","Value":"cbl2 libreswan 4.7-5 on CBL Mariner 2.0"},{"ProductID":"18328-17084","Value":"azl3 libreswan 4.7-6 on Azure Linux 3.0"},{"ProductID":"18334-16823","Value":"cbl2 vim 9.0.1562-2 on CBL Mariner 2.0"},{"ProductID":"17515-17084","Value":"azl3 application-gateway-kubernetes-ingress 1.7.2-3 on Azure Linux 3.0"},{"ProductID":"19346-17084","Value":"azl3 containerized-data-importer 1.57.0-14 on Azure Linux 3.0"},{"ProductID":"18130-16823","Value":"cbl2 packer 1.9.5-3 on CBL Mariner 2.0"},{"ProductID":"18184-16823","Value":"cbl2 multus 4.0.2-5 on CBL Mariner 2.0"},{"ProductID":"18185-16823","Value":"cbl2 cni-plugins 1.3.0-6 on CBL Mariner 2.0"},{"ProductID":"18186-16823","Value":"cbl2 telegraf 1.27.4-1 on CBL Mariner 2.0"},{"ProductID":"17341-16823","Value":"cbl2 vitess 17.0.7-1 on CBL Mariner 2.0"},{"ProductID":"18187-16823","Value":"cbl2 kubevirt 0.59.0-24 on CBL Mariner 2.0"},{"ProductID":"17402-16823","Value":"cbl2 cert-manager 1.11.2-14 on CBL Mariner 2.0"},{"ProductID":"18188-17084","Value":"azl3 multus 4.0.2-2 on Azure Linux 3.0"},{"ProductID":"16898-17084","Value":"azl3 vitess 19.0.4-2 on Azure Linux 3.0"},{"ProductID":"18164-17084","Value":"azl3 telegraf 1.29.4-1 on Azure Linux 3.0"},{"ProductID":"17786-17084","Value":"azl3 prometheus-adapter 0.12.0-1 on Azure Linux 3.0"},{"ProductID":"18189-17084","Value":"azl3 kubevirt 1.2.0-1 on Azure Linux 3.0"},{"ProductID":"18190-17084","Value":"azl3 containerized-data-importer 1.57.0-12 on Azure Linux 3.0"},{"ProductID":"17766-17084","Value":"azl3 cert-manager 1.12.12-1 on Azure Linux 3.0"},{"ProductID":"17587-17084","Value":"azl3 application-gateway-kubernetes-ingress 1.7.7-1 on Azure Linux 3.0"},{"ProductID":"19345-17084","Value":"azl3 multus 4.0.2-5 on Azure Linux 3.0"},{"ProductID":"17219-16823","Value":"cbl2 haproxy 2.4.24-1 on CBL Mariner 2.0"},{"ProductID":"18330-16823","Value":"cbl2 xterm 380-1 on CBL Mariner 2.0"},{"ProductID":"18322-16823","Value":"cbl2 hyperv-daemons 5.15.131.1-1 on CBL Mariner 2.0"},{"ProductID":"18282-16823","Value":"cbl2 kernel 5.15.131.1-2 on CBL Mariner 2.0"},{"ProductID":"17917-16823","Value":"cbl2 kernel 5.15.135.1-2 on CBL Mariner 2.0"},{"ProductID":"18140-16823","Value":"cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0"},{"ProductID":"18138-16823","Value":"cbl2 golang 1.20.7-1 on CBL Mariner 2.0"},{"ProductID":"18141-17084","Value":"azl3 golang 1.20.7-1 on Azure Linux 3.0"},{"ProductID":"18845-17084","Value":"azl3 clamav 0.105.2-4 on Azure Linux 3.0"},{"ProductID":"19459-16823","Value":"cbl2 opensc 0.23.0-1 on CBL Mariner 2.0"},{"ProductID":"19189-16823","Value":"cbl2 flac 1.4.3-1 on CBL Mariner 2.0"},{"ProductID":"19516-16823","Value":"cbl2 busybox 1.35.0-13 on CBL Mariner 2.0"},{"ProductID":"19085-17084","Value":"azl3 giflib 5.2.1-10 on Azure Linux 3.0"},{"ProductID":"18325-16823","Value":"cbl2 giflib 5.2.1-8 on CBL Mariner 2.0"},{"ProductID":"18326-17084","Value":"azl3 giflib 5.2.1-8 on Azure Linux 3.0"},{"ProductID":"18410-17084","Value":"azl3 indent 2.2.13-1 on Azure Linux 3.0"},{"ProductID":"16884-17084","Value":"azl3 p7zip 16.02-23 on Azure Linux 3.0"}],"Name":"Mariner","Type":1},{"Items":[{"ProductID":"19778-17086","Value":"cbl2 golang 1.17.13-2 on CBL Mariner 2.0"},{"ProductID":"19785-17086","Value":"cbl2 golang 1.18.8-7 on CBL Mariner 2.0"},{"ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"ProductID":"20103-17086","Value":"cbl2 busybox 1.35.0-14 on CBL Mariner 2.0"},{"ProductID":"20103-21692","Value":"cbl2 busybox 1.35.0-14 on CBL-Mariner 2.0"},{"ProductID":"19943-17084","Value":"azl3 busybox 1.36.1-12 on Azure Linux 3.0"},{"ProductID":"19764-17084","Value":"azl3 mdadm 4.1-9 on Azure Linux 3.0"},{"ProductID":"20279-17084","Value":"azl3 grpc 1.42.0-7 on Azure Linux 3.0"},{"ProductID":"19899-17084","Value":"azl3 libreswan 4.7-7 on Azure Linux 3.0"},{"ProductID":"19928-17086","Value":"cbl2 packer 1.8.7-2 on CBL Mariner 2.0"},{"ProductID":"19959-17084","Value":"azl3 kubevirt 0.59.0-14 on Azure Linux 3.0"},{"ProductID":"19966-17084","Value":"azl3 prometheus-adapter 0.11.2-1 on Azure Linux 3.0"},{"ProductID":"19664-17084","Value":"azl3 telegraf 1.27.3-4 on Azure Linux 3.0"},{"ProductID":"19970-17084","Value":"azl3 vitess 17.0.2-1 on Azure Linux 3.0"},{"ProductID":"19863-17084","Value":"azl3 cert-manager 1.11.2-8 on Azure Linux 3.0"},{"ProductID":"20153-17084","Value":"azl3 busybox 1.36.1-13 on Azure Linux 3.0"}],"Name":"Open Source Software","Type":1}],"Name":"Microsoft","Type":0}],"FullProductName":[{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.26664:*:*:*:*:*:x64:*","ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.26664:*:*:*:*:*:x64:*","ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22216:*:*:*:*:*:x64:*","ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.24414:*:*:*:*:*:x64:*","ProductID":"10378","Value":"Windows Server 2012"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.24414:*:*:*:*:*:x64:*","ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:outlook_2013:*:*:*:*:rt:*:*:*","ProductID":"10407","Value":"Microsoft Outlook 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.21503:*:*:*:*:*:x64:*","ProductID":"10483","Value":"Windows Server 2012 R2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.21503:*:*:*:*:*:x64:*","ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:office_2013:*:sp1:*:*:*:*:x86:*","ProductID":"10601","Value":"Microsoft Office 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:office_2013:*:sp1:*:*:*:*:x64:*","ProductID":"10602","Value":"Microsoft Office 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:office_2013:*:sp1:*:*:rt:*:*:*","ProductID":"10603","Value":"Microsoft Office 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:word_2013:*:sp1:*:*:*:*:*:*","ProductID":"10604","Value":"Microsoft Word 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:word_2013:*:sp1:*:*:*:*:*:*","ProductID":"10605","Value":"Microsoft Word 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:word_2013:*:sp1:*:*:*:*:*:*","ProductID":"10606","Value":"Microsoft Word 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:publisher_2013:*:sp1:*:*:*:*:*:*","ProductID":"10609","Value":"Microsoft Publisher 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:publisher_2013:*:sp1:*:*:*:*:*:*","ProductID":"10610","Value":"Microsoft Publisher 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:excel_2013:*:sp1:*:*:*:*:x86:*","ProductID":"10654","Value":"Microsoft Excel 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:excel_2013:*:sp1:*:*:*:*:x64:*","ProductID":"10655","Value":"Microsoft Excel 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:excel_2013:*:sp1:*:*:rt:*:*:*","ProductID":"10656","Value":"Microsoft Excel 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:powerpoint_2013:*:sp1:*:*:*:*:*:*","ProductID":"10692","Value":"Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:powerpoint_2013:*:sp1:*:*:*:*:*:*","ProductID":"10693","Value":"Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:powerpoint_2013:*:sp1:*:*:rt:*:*:*","ProductID":"10694","Value":"Microsoft PowerPoint 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:visio_2013:*:sp1:*:*:*:*:*:*","ProductID":"10725","Value":"Microsoft Visio 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:visio_2013:*:sp1:*:*:*:*:*:*","ProductID":"10726","Value":"Microsoft Visio 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20107:*:*:*:*:*:x86:*","ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20107:*:*:*:*:*:x64:*","ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x86:*","ProductID":"10739","Value":"Microsoft Excel 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:excel_2016:*:*:*:*:*:*:x64:*","ProductID":"10740","Value":"Microsoft Excel 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:powerpoint_2016:*:*:*:*:*:*:*:*","ProductID":"10741","Value":"Microsoft PowerPoint 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:powerpoint_2016:*:*:*:*:*:*:*:*","ProductID":"10742","Value":"Microsoft PowerPoint 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:visio_2016:*:*:*:*:*:*:*:*","ProductID":"10743","Value":"Microsoft Visio 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:visio_2016:*:*:*:*:*:*:*:*","ProductID":"10744","Value":"Microsoft Visio 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:word_2016:*:*:*:*:*:*:*:*","ProductID":"10746","Value":"Microsoft Word 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:word_2016:*:*:*:*:*:*:*:*","ProductID":"10747","Value":"Microsoft Word 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:publisher_2016:*:*:*:*:*:*:x86:*","ProductID":"10749","Value":"Microsoft Publisher 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:publisher_2016:*:*:*:*:*:*:x64:*","ProductID":"10750","Value":"Microsoft Publisher 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x86:*","ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:office_2016:*:*:*:*:*:*:x64:*","ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:project_2016:*:*:*:*:*:*:*:*","ProductID":"10760","Value":"Microsoft Project 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:project_2016:*:*:*:*:*:*:*:*","ProductID":"10761","Value":"Microsoft Project 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:onenote_2016:*:*:*:*:*:*:*:*","ProductID":"10762","Value":"Microsoft OneNote 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:onenote_2016:*:*:*:*:*:*:*:*","ProductID":"10763","Value":"Microsoft OneNote 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:outlook_2016:*:*:*:*:*:x86:*:*","ProductID":"10765","Value":"Microsoft Outlook 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:outlook_2016:*:*:*:*:*:x64:*:*","ProductID":"10766","Value":"Microsoft Outlook 2016 (64-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:onenote_2013:sp1:*:*:*:*:*:*:*","ProductID":"10793","Value":"Microsoft OneNote 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:onenote_2013:sp1:*:*:*:*:*:*:*","ProductID":"10794","Value":"Microsoft OneNote 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:onenote_2013:sp1:*:*:*:*:*:*:*","ProductID":"10795","Value":"Microsoft OneNote 2013 RT Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:project_2013:*:sp1:*:*:*:*:*:*","ProductID":"10800","Value":"Microsoft Project 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:project_2013:*:sp1:*:*:*:*:*:*","ProductID":"10801","Value":"Microsoft Project 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:outlook_2013:*:*:*:*:*:x86:*:*","ProductID":"10810","Value":"Microsoft Outlook 2013 Service Pack 1 (32-bit editions)"},{"CPE":"cpe:2.3:a:microsoft:outlook_2013:*:*:*:*:*:*:x64:*","ProductID":"10811","Value":"Microsoft Outlook 2013 Service Pack 1 (64-bit editions)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6167:*:*:*:*:*:*:*","ProductID":"10816","Value":"Windows Server 2016"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6167:*:*:*:*:*:x86:*","ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6167:*:*:*:*:*:x64:*","ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6167:*:*:*:*:*:*:*","ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:sharepoint_server_2016:*:*:*:*:enterprise:*:*:*","ProductID":"10950","Value":"Microsoft SharePoint Enterprise Server 2016"},{"CPE":"cpe:2.3:a:microsoft:asp.net_core:2.1*:*:*:*:*:*:*:*","ProductID":"11564","Value":"ASP.NET Core 2.1"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4737:*:*:*:*:*:x86:*","ProductID":"11568","Value":"Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4737:*:*:*:*:*:x64:*","ProductID":"11569","Value":"Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.4737:*:*:*:*:*:arm64:*","ProductID":"11570","Value":"Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.4737:*:*:*:*:*:*:*","ProductID":"11571","Value":"Windows Server 2019"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.4737:*:*:*:*:*:*:*","ProductID":"11572","Value":"Windows Server 2019 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","ProductID":"11573","Value":"Microsoft Office 2019 for 32-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:*:*:*","ProductID":"11574","Value":"Microsoft Office 2019 for 64-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office_2019:*:*:*:*:*:macos:*:*","ProductID":"11575","Value":"Microsoft Office 2019 for Mac"},{"CPE":"cpe:2.3:a:microsoft:sharepoint_server_2019:*:*:*:*:*:*:*:*","ProductID":"11585","Value":"Microsoft SharePoint Server 2019"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*","ProductID":"11600","Value":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)"},{"CPE":"cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*","ProductID":"11605","Value":"Microsoft Office Online Server"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10049","Value":"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10051","Value":"Microsoft .NET Framework 4.8 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10378","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10379","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10483","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012 R2"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10543","Value":"Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10816","Value":"Microsoft .NET Framework 4.8 on Windows Server 2016"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10852","Value":"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10853","Value":"Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11650-10855","Value":"Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*","ProductID":"11655","Value":"Microsoft Edge (Chromium-based)"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*","ProductID":"11664","Value":"Microsoft Dynamics 365 (on-premises) version 9.0"},{"CPE":"cpe:2.3:a:microsoft:azure_devops_server_2019:*:*:*:*:*:*:*:*","ProductID":"11675","Value":"Azure DevOps Server 2019.0.1"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11568","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11569","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11570","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11571","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11572","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11923","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11924","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11926","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11927","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11929","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11930","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-11931","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-12097","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-12098","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8:*:*:*:*:*:*:*","ProductID":"11676-12099","Value":"Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11677-11568","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11677-11569","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11677-11570","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11677-11571","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11677-11572","Value":"Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","ProductID":"11723-10816","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016"},{"CPE":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","ProductID":"11723-10852","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","ProductID":"11723-10853","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net_framework:3.5:*:*:*:*:*:*:*","ProductID":"11723-10855","Value":"Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:publisher_2013:*:sp1:*:*:*:*:*:*","ProductID":"11742","Value":"Microsoft Publisher 2013 Service Pack 1 RT"},{"CPE":"cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*","ProductID":"11744","Value":"Windows Defender Antimalware Platform"},{"CPE":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","ProductID":"11762","Value":"Microsoft 365 Apps for Enterprise for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:365_apps:*:*:*:*:enterprise:*:*:*","ProductID":"11763","Value":"Microsoft 365 Apps for Enterprise for 64-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*","ProductID":"11808","Value":"HEVC Video Extensions"},{"CPE":"cpe:2.3:a:microsoft:teams:-:*:*:*:*:iphone_os:*:*","ProductID":"11858","Value":"Microsoft Teams for iOS"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11863-10049","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11863-10051","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11863-10378","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11863-10379","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11863-10483","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2"},{"CPE":"cpe:2.3:a:microsoft:.net:4.7.2:*:*:*:*:*:*:*","ProductID":"11863-10543","Value":"Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.1906:*:*:*:*:*:*:*","ProductID":"11923","Value":"Windows Server 2022"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.1906:*:*:*:*:*:*:*","ProductID":"11924","Value":"Windows Server 2022 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.2295:*:*:*:*:*:x64:*","ProductID":"11926","Value":"Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.2295:*:*:*:*:*:arm64:*","ProductID":"11927","Value":"Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.3324:*:*:*:*:*:x86:*","ProductID":"11929","Value":"Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.3324:*:*:*:*:*:arm64:*","ProductID":"11930","Value":"Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19044.3324:*:*:*:*:*:x64:*","ProductID":"11931","Value":"Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","ProductID":"11935","Value":"Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)"},{"CPE":"cpe:2.3:a:microsoft:office_macos_2021:*:*:*:*:*:long_term_servicing_channel:*:*","ProductID":"11951","Value":"Microsoft Office LTSC for Mac 2021"},{"CPE":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","ProductID":"11952","Value":"Microsoft Office LTSC 2021 for 64-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office_2021:*:*:*:*:long_term_servicing_channel:*:*:*","ProductID":"11953","Value":"Microsoft Office LTSC 2021 for 32-bit editions"},{"CPE":"cpe:2.3:a:microsoft:sharepoint_server:-:*:*:*:subscription:*:*:*","ProductID":"11961","Value":"Microsoft SharePoint Server Subscription Edition"},{"CPE":"cpe:2.3:a:microsoft:azure_hdinsights:1.5.42.0:*:*:*:*:*:*:*","ProductID":"11987","Value":"Azure HDInsight"},{"CPE":"cpe:2.3:a:microsoft:teams:-:*:*:*:*:android:*:*","ProductID":"12007","Value":"Microsoft Teams for Android"},{"CPE":"cpe:2.3:a:microsoft:.net:6.0.0:*:*:*:*:*:*:*","ProductID":"12009","Value":".NET 6.0"},{"CPE":"cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*","ProductID":"12010","Value":"HEVC Video Extension"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*","ProductID":"12038","Value":"Microsoft Exchange Server 2019 Cumulative Update 12"},{"CPE":"cpe:2.3:a:microsoft:exchange_server_2016:*:cumulative_update_23:*:*:*:*:*:*","ProductID":"12039","Value":"Microsoft Exchange Server 2016 Cumulative Update 23"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2022:17.2:*:*:*:*:*:*:*","ProductID":"12051","Value":"Microsoft Visual Studio 2022 version 17.2"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11923","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11924","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11926","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11927","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11929","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11930","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-11931","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-12085","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-12086","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-12097","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-12098","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.8.1:*:*:*:*:*:*:*","ProductID":"12079-12099","Value":"Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.2134:*:*:*:*:*:arm64:*","ProductID":"12085","Value":"Windows 11 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.2134:*:*:*:*:*:x64:*","ProductID":"12086","Value":"Windows 11 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3324:*:*:*:*:*:x64:*","ProductID":"12097","Value":"Windows 10 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3324:*:*:*:*:*:arm64:*","ProductID":"12098","Value":"Windows 10 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3324:*:*:*:*:*:x86:*","ProductID":"12099","Value":"Windows 10 Version 22H2 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*","ProductID":"12115-10287","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*","ProductID":"12115-9312","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"CPE":"cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*","ProductID":"12115-9318","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"CPE":"cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*","ProductID":"12115-9344","Value":"Microsoft .NET Framework 4.6.2 on Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*","ProductID":"12128-10729","Value":"Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:.net:4.6.2:*:*:*:*:*:*:*","ProductID":"12128-10735","Value":"Microsoft .NET Framework 3.5 and 4.6.2 on Windows 10 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*","ProductID":"12129","Value":"Microsoft Visual Studio 2022 version 17.4"},{"CPE":"cpe:2.3:a:microsoft:.net:7.0.0:*:*:*:*:*:*:*","ProductID":"12130","Value":".NET 7.0"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:x64","ProductID":"12137","Value":"CBL Mariner 1.0 x64"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:1.0:*:*:*:*:*:*:arm","ProductID":"12138","Value":"CBL Mariner 1.0 ARM"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:2.0:*:*:*:*:*:*:x64","ProductID":"12139","Value":"CBL Mariner 2.0 x64"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:2.0:*:*:*:*:*:*:arm","ProductID":"12140","Value":"CBL Mariner 2.0 ARM"},{"CPE":"cpe:2.3:a:microsoft:azure_devops_server_2020:*:-:*:*:*:*:*:*","ProductID":"12143","Value":"Azure DevOps Server 2020.1.2"},{"CPE":"cpe:2.3:a:microsoft:ole_db_driver_19_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12180","Value":"Microsoft OLE DB Driver 19 for SQL Server"},{"CPE":"cpe:2.3:a:microsoft:ole_db_driver_18_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12181","Value":"Microsoft OLE DB Driver 18 for SQL Server"},{"CPE":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:*:*:*","ProductID":"12182","Value":"Microsoft Teams for Desktop"},{"CPE":"cpe:2.3:a:microsoft:sql_server_2019:*:*:*:*:*:*:x64:*","ProductID":"12184","Value":"Microsoft SQL Server 2019 for x64-based Systems (CU 21)"},{"CPE":"cpe:2.3:a:microsoft:sql_server_2022:*:*:*:*:*:*:x64:*","ProductID":"12185","Value":"Microsoft SQL Server 2022 for x64-based Systems (CU 5)"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2022:*:*:*:*:*:*:*:*","ProductID":"12187","Value":"Microsoft Visual Studio 2022 version 17.6"},{"CPE":"cpe:2.3:a:microsoft:azure_devops_server_2022:*:-:*:*:*:*:*:*","ProductID":"12189","Value":"Azure DevOps Server 2022.0.1"},{"CPE":"cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13:*:*:*:*:*:*","ProductID":"12191","Value":"Microsoft Exchange Server 2019 Cumulative Update 13"},{"CPE":"cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12193","Value":"Microsoft ODBC Driver 17 for SQL Server on Windows"},{"CPE":"cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12194","Value":"Microsoft ODBC Driver 17 for SQL Server on Linux"},{"CPE":"cpe:2.3:a:microsoft:odbc_driver_17_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12195","Value":"Microsoft ODBC Driver 17 for SQL Server on MacOS"},{"CPE":"cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12196","Value":"Microsoft ODBC Driver 18 for SQL Server on Windows"},{"CPE":"cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12197","Value":"Microsoft ODBC Driver 18 for SQL Server on Linux"},{"CPE":"cpe:2.3:a:microsoft:odbc_driver_18_for_sql_server:-:*:*:*:*:*:*:*","ProductID":"12198","Value":"Microsoft ODBC Driver 18 for SQL Server on MacOS"},{"CPE":"cpe:2.3:a:microsoft:azure_devops_server_2019:*:-:*:*:*:*:*:*","ProductID":"12211","Value":"Azure DevOps Server 2019.1.2"},{"CPE":"cpe:2.3:a:microsoft:visual_studio_2010_tools_for_office_runtime:-:*:*:*:*:*:*:*","ProductID":"12215","Value":"Visual Studio 2010 Tools for Office Runtime"},{"CPE":"cpe:2.3:a:microsoft:teams:-:*:*:*:*:mac:*:*","ProductID":"12216","Value":"Microsoft Teams for Mac"},{"CPE":"cpe:2.3:a:microsoft:azure_arc_enabled_server:*:*:*:*:*:*:*:*","ProductID":"12217","Value":"Azure Arc-Enabled Servers"},{"CPE":"cpe:2.3:a:microsoft:azure_virtual_machines:-:*:*:*:*:*:*:*","ProductID":"12218","Value":"Azure Virtual Machines"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365_business_central_2023:*:release_wave_1:*:*:*:*:*:*","ProductID":"12219","Value":"Microsoft Dynamics 365 Business Central 2023 Release Wave 1"},{"CPE":"cpe:2.3:a:microsoft:memory-integrity-system-readiness-scan-tool:-:*:*:*:*:*:*:*","ProductID":"12221","Value":"Memory Integrity System Readiness Scan Tool"},{"CPE":"cpe:2.3:a:microsoft:azl3_p7zip_16.02-23:*:*:*:*:*:*:*:*","ProductID":"16884-17084","Value":"azl3 p7zip 16.02-23 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_vitess_19.0.4-2:*:*:*:*:*:*:*:*","ProductID":"16898-17084","Value":"azl3 vitess 19.0.4-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_zziplib_0.13.74-1:*:*:*:*:*:*:*:*","ProductID":"16914-17084","Value":"azl3 zziplib 0.13.74-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_haproxy_2.4.24-1:*:*:*:*:*:*:*:*","ProductID":"17219-16823","Value":"cbl2 haproxy 2.4.24-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_vitess_17.0.7-1:*:*:*:*:*:*:*:*","ProductID":"17341-16823","Value":"cbl2 vitess 17.0.7-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.21.6-1:*:*:*:*:*:*:*:*","ProductID":"17375-16823","Value":"cbl2 golang 1.21.6-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python3_3.9.19-1:*:*:*:*:*:*:*:*","ProductID":"17386-16823","Value":"cbl2 python3 3.9.19-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cert-manager_1.11.2-14:*:*:*:*:*:*:*:*","ProductID":"17402-16823","Value":"cbl2 cert-manager 1.11.2-14 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_nodejs_16.20.2-2:*:*:*:*:*:*:*:*","ProductID":"17454-16823","Value":"cbl2 nodejs 16.20.2-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.23.7-1:*:*:*:*:*:*:*:*","ProductID":"17485-17084","Value":"azl3 golang 1.23.7-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_application-gateway-kubernetes-ingress_1.7.2-3:*:*:*:*:*:*:*:*","ProductID":"17515-17084","Value":"azl3 application-gateway-kubernetes-ingress 1.7.2-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_application-gateway-kubernetes-ingress_1.7.7-1:*:*:*:*:*:*:*:*","ProductID":"17587-17084","Value":"azl3 application-gateway-kubernetes-ingress 1.7.7-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_tensorflow_2.16.1-9:*:*:*:*:*:*:*:*","ProductID":"17667-17084","Value":"azl3 tensorflow 2.16.1-9 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cert-manager_1.12.12-1:*:*:*:*:*:*:*:*","ProductID":"17766-17084","Value":"azl3 cert-manager 1.12.12-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_prometheus-adapter_0.12.0-1:*:*:*:*:*:*:*:*","ProductID":"17786-17084","Value":"azl3 prometheus-adapter 0.12.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.126.1-1:*:*:*:*:*:*:*:*","ProductID":"17832-16823","Value":"cbl2 kernel 5.15.126.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_nodejs18_18.17.1-2:*:*:*:*:*:*:*:*","ProductID":"17866-16823","Value":"cbl2 nodejs18 18.17.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_grpc_1.62.0-2:*:*:*:*:*:*:*:*","ProductID":"17871-17084","Value":"azl3 grpc 1.62.0-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.135.1-2:*:*:*:*:*:*:*:*","ProductID":"17917-16823","Value":"cbl2 kernel 5.15.135.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_rust_1.72.0-2:*:*:*:*:*:*:*:*","ProductID":"17953-16823","Value":"cbl2 rust 1.72.0-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_busybox_1.36.1-11:*:*:*:*:*:*:*:*","ProductID":"18015-17084","Value":"azl3 busybox 1.36.1-11 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_packer_1.9.5-3:*:*:*:*:*:*:*:*","ProductID":"18130-16823","Value":"cbl2 packer 1.9.5-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python-tensorboard_2.11.0-2:*:*:*:*:*:*:*:*","ProductID":"18133-16823","Value":"cbl2 python-tensorboard 2.11.0-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.20.7-1:*:*:*:*:*:*:*:*","ProductID":"18138-16823","Value":"cbl2 golang 1.20.7-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_msft-golang_1.20.7-1:*:*:*:*:*:*:*:*","ProductID":"18140-16823","Value":"cbl2 msft-golang 1.20.7-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.20.7-1:*:*:*:*:*:*:*:*","ProductID":"18141-17084","Value":"azl3 golang 1.20.7-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_msft-golang_1.19.12-1:*:*:*:*:*:*:*:*","ProductID":"18148-16823","Value":"cbl2 msft-golang 1.19.12-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.19.12-1:*:*:*:*:*:*:*:*","ProductID":"18149-16823","Value":"cbl2 golang 1.19.12-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.19.12-1:*:*:*:*:*:*:*:*","ProductID":"18150-17084","Value":"azl3 golang 1.19.12-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qemu_6.2.0-23:*:*:*:*:*:*:*:*","ProductID":"18160-16823","Value":"cbl2 qemu 6.2.0-23 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_telegraf_1.29.4-1:*:*:*:*:*:*:*:*","ProductID":"18164-17084","Value":"azl3 telegraf 1.29.4-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_multus_4.0.2-5:*:*:*:*:*:*:*:*","ProductID":"18184-16823","Value":"cbl2 multus 4.0.2-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cni-plugins_1.3.0-6:*:*:*:*:*:*:*:*","ProductID":"18185-16823","Value":"cbl2 cni-plugins 1.3.0-6 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_telegraf_1.27.4-1:*:*:*:*:*:*:*:*","ProductID":"18186-16823","Value":"cbl2 telegraf 1.27.4-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kubevirt_0.59.0-24:*:*:*:*:*:*:*:*","ProductID":"18187-16823","Value":"cbl2 kubevirt 0.59.0-24 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_multus_4.0.2-2:*:*:*:*:*:*:*:*","ProductID":"18188-17084","Value":"azl3 multus 4.0.2-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubevirt_1.2.0-1:*:*:*:*:*:*:*:*","ProductID":"18189-17084","Value":"azl3 kubevirt 1.2.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_containerized-data-importer_1.57.0-12:*:*:*:*:*:*:*:*","ProductID":"18190-17084","Value":"azl3 containerized-data-importer 1.57.0-12 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qemu_8.2.0-1:*:*:*:*:*:*:*:*","ProductID":"18233-17084","Value":"azl3 qemu 8.2.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_postgresql_14.10-1:*:*:*:*:*:*:*:*","ProductID":"18239-16823","Value":"cbl2 postgresql 14.10-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubernetes_1.28.7-2:*:*:*:*:*:*:*:*","ProductID":"18252-17084","Value":"azl3 kubernetes 1.28.7-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.131.1-2:*:*:*:*:*:*:*:*","ProductID":"18282-16823","Value":"cbl2 kernel 5.15.131.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_gcc_13.2.0-7:*:*:*:*:*:*:*:*","ProductID":"18315-17084","Value":"azl3 gcc 13.2.0-7 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_hyperv-daemons_5.15.131.1-1:*:*:*:*:*:*:*:*","ProductID":"18322-16823","Value":"cbl2 hyperv-daemons 5.15.131.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_frr_8.5.3-2:*:*:*:*:*:*:*:*","ProductID":"18323-16823","Value":"cbl2 frr 8.5.3-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_wireshark_4.0.8-1:*:*:*:*:*:*:*:*","ProductID":"18324-16823","Value":"cbl2 wireshark 4.0.8-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_giflib_5.2.1-8:*:*:*:*:*:*:*:*","ProductID":"18325-16823","Value":"cbl2 giflib 5.2.1-8 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_giflib_5.2.1-8:*:*:*:*:*:*:*:*","ProductID":"18326-17084","Value":"azl3 giflib 5.2.1-8 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libreswan_4.7-5:*:*:*:*:*:*:*:*","ProductID":"18327-16823","Value":"cbl2 libreswan 4.7-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libreswan_4.7-6:*:*:*:*:*:*:*:*","ProductID":"18328-17084","Value":"azl3 libreswan 4.7-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_php_8.1.22-1:*:*:*:*:*:*:*:*","ProductID":"18329-16823","Value":"cbl2 php 8.1.22-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_xterm_380-1:*:*:*:*:*:*:*:*","ProductID":"18330-16823","Value":"cbl2 xterm 380-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_mdadm_4.1-10:*:*:*:*:*:*:*:*","ProductID":"18331-16823","Value":"cbl2 mdadm 4.1-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mdadm_4.2-1:*:*:*:*:*:*:*:*","ProductID":"18332-17084","Value":"azl3 mdadm 4.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtbase_5.12.11-9:*:*:*:*:*:*:*:*","ProductID":"18333-16823","Value":"cbl2 qt5-qtbase 5.12.11-9 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_vim_9.0.1562-2:*:*:*:*:*:*:*:*","ProductID":"18334-16823","Value":"cbl2 vim 9.0.1562-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_krb5_1.19.4-2:*:*:*:*:*:*:*:*","ProductID":"18335-16823","Value":"cbl2 krb5 1.19.4-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_rubygem-protocol-http1_0.15.1-1:*:*:*:*:*:*:*:*","ProductID":"18336-16823","Value":"cbl2 rubygem-protocol-http1 0.15.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_crash_8.0.4-3:*:*:*:*:*:*:*:*","ProductID":"18344-17084","Value":"azl3 crash 8.0.4-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_binutils_2.37-10:*:*:*:*:*:*:*:*","ProductID":"18365-16823","Value":"cbl2 binutils 2.37-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_indent_2.2.13-1:*:*:*:*:*:*:*:*","ProductID":"18410-17084","Value":"azl3 indent 2.2.13-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libqb_2.0.8-1:*:*:*:*:*:*:*:*","ProductID":"18416-17084","Value":"azl3 libqb 2.0.8-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mozjs_102.15.1-1:*:*:*:*:*:*:*:*","ProductID":"18469-17084","Value":"azl3 mozjs 102.15.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qemu_6.2.0-18:*:*:*:*:*:*:*:*","ProductID":"18535-17084","Value":"azl3 qemu 6.2.0-18 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libsass_3.6.6-1:*:*:*:*:*:*:*:*","ProductID":"18827-17084","Value":"azl3 libsass 3.6.6-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_openmpi_4.1.7-2:*:*:*:*:*:*:*:*","ProductID":"18838-17084","Value":"azl3 openmpi 4.1.7-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_hwloc_2.9.2-2:*:*:*:*:*:*:*:*","ProductID":"18839-17084","Value":"azl3 hwloc 2.9.2-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_crash_8.0.4-4:*:*:*:*:*:*:*:*","ProductID":"18844-17084","Value":"azl3 crash 8.0.4-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_clamav_0.105.2-4:*:*:*:*:*:*:*:*","ProductID":"18845-17084","Value":"azl3 clamav 0.105.2-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ntopng_5.2.1-5:*:*:*:*:*:*:*:*","ProductID":"19082-17084","Value":"azl3 ntopng 5.2.1-5 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_giflib_5.2.1-10:*:*:*:*:*:*:*:*","ProductID":"19085-17084","Value":"azl3 giflib 5.2.1-10 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_json-c_0.15-2:*:*:*:*:*:*:*:*","ProductID":"19178-16823","Value":"cbl2 json-c 0.15-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python-gevent_21.1.2-1:*:*:*:*:*:*:*:*","ProductID":"19187-16823","Value":"cbl2 python-gevent 21.1.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libssh2_1.9.0-3:*:*:*:*:*:*:*:*","ProductID":"19188-16823","Value":"cbl2 libssh2 1.9.0-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_flac_1.4.3-1:*:*:*:*:*:*:*:*","ProductID":"19189-16823","Value":"cbl2 flac 1.4.3-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_gsl_2.8-1:*:*:*:*:*:*:*:*","ProductID":"19206-17084","Value":"azl3 gsl 2.8-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_php_8.3.19-1:*:*:*:*:*:*:*:*","ProductID":"19269-17084","Value":"azl3 php 8.3.19-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_multus_4.0.2-5:*:*:*:*:*:*:*:*","ProductID":"19345-17084","Value":"azl3 multus 4.0.2-5 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_containerized-data-importer_1.57.0-14:*:*:*:*:*:*:*:*","ProductID":"19346-17084","Value":"azl3 containerized-data-importer 1.57.0-14 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libxml2_2.11.5-5:*:*:*:*:*:*:*:*","ProductID":"19447-17084","Value":"azl3 libxml2 2.11.5-5 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_opensc_0.23.0-1:*:*:*:*:*:*:*:*","ProductID":"19459-16823","Value":"cbl2 opensc 0.23.0-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_binutils_2.37-9:*:*:*:*:*:*:*:*","ProductID":"19514-16823","Value":"cbl2 binutils 2.37-9 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_gdb_11.2-5:*:*:*:*:*:*:*:*","ProductID":"19515-16823","Value":"cbl2 gdb 11.2-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_busybox_1.35.0-13:*:*:*:*:*:*:*:*","ProductID":"19516-16823","Value":"cbl2 busybox 1.35.0-13 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_file_5.40-3:*:*:*:*:*:*:*:*","ProductID":"19517-16823","Value":"cbl2 file 5.40-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_telegraf_1.27.3-4:*:*:*:*:*:*:*:*","ProductID":"19664-17084","Value":"azl3 telegraf 1.27.3-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ceph_18.2.2-8:*:*:*:*:*:*:*:*","ProductID":"19666-17084","Value":"azl3 ceph 18.2.2-8 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_tensorflow_2.11.1-2:*:*:*:*:*:*:*:*","ProductID":"19668-17086","Value":"cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_tensorflow_2.11.1-2:*:*:*:*:*:*:*:*","ProductID":"19668-21692","Value":"cbl2 tensorflow 2.11.1-2 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.75.0-14:*:*:*:*:*:*:*:*","ProductID":"19671-17084","Value":"azl3 rust 1.75.0-14 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.23.9-1:*:*:*:*:*:*:*:*","ProductID":"19679-17084","Value":"azl3 golang 1.23.9-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.86.0-1:*:*:*:*:*:*:*:*","ProductID":"19686-17084","Value":"azl3 rust 1.86.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-tensorboard_2.16.2-6:*:*:*:*:*:*:*:*","ProductID":"19693-17084","Value":"azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.24.3-1:*:*:*:*:*:*:*:*","ProductID":"19697-17084","Value":"azl3 golang 1.24.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python-tensorboard_2.11.0-3:*:*:*:*:*:*:*:*","ProductID":"19712-17086","Value":"cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_moby-engine_25.0.3-13:*:*:*:*:*:*:*:*","ProductID":"19729-17084","Value":"azl3 moby-engine 25.0.3-13 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mdadm_4.1-9:*:*:*:*:*:*:*:*","ProductID":"19764-17084","Value":"azl3 mdadm 4.1-9 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.17.13-2:*:*:*:*:*:*:*:*","ProductID":"19778-17086","Value":"cbl2 golang 1.17.13-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.18.8-7:*:*:*:*:*:*:*:*","ProductID":"19785-17086","Value":"cbl2 golang 1.18.8-7 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_nasm_2.16.01-1:*:*:*:*:*:*:*:*","ProductID":"19796-17084","Value":"azl3 nasm 2.16.01-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ceph_16.2.10-7:*:*:*:*:*:*:*:*","ProductID":"19814-17086","Value":"cbl2 ceph 16.2.10-7 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ceph_16.2.10-7:*:*:*:*:*:*:*:*","ProductID":"19814-21692","Value":"cbl2 ceph 16.2.10-7 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cert-manager_1.11.2-8:*:*:*:*:*:*:*:*","ProductID":"19863-17084","Value":"azl3 cert-manager 1.11.2-8 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libreswan_4.7-7:*:*:*:*:*:*:*:*","ProductID":"19899-17084","Value":"azl3 libreswan 4.7-7 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_hyperv-daemons_5.15.180.1-1:*:*:*:*:*:*:*:*","ProductID":"19919","Value":"cbl2 hyperv-daemons 5.15.180.1-1"},{"CPE":"cpe:2.3:a:microsoft:cbl2_hyperv-daemons_5.15.180.1-1:*:*:*:*:*:*:*:*","ProductID":"19919-21692","Value":"cbl2 hyperv-daemons 5.15.180.1-1 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_packer_1.8.7-2:*:*:*:*:*:*:*:*","ProductID":"19928-17086","Value":"cbl2 packer 1.8.7-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_etcd_3.5.9-1:*:*:*:*:*:*:*:*","ProductID":"19942-17084","Value":"azl3 etcd 3.5.9-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_busybox_1.36.1-12:*:*:*:*:*:*:*:*","ProductID":"19943-17084","Value":"azl3 busybox 1.36.1-12 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubevirt_0.59.0-14:*:*:*:*:*:*:*:*","ProductID":"19959-17084","Value":"azl3 kubevirt 0.59.0-14 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_prometheus-adapter_0.11.2-1:*:*:*:*:*:*:*:*","ProductID":"19966-17084","Value":"azl3 prometheus-adapter 0.11.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_vitess_17.0.2-1:*:*:*:*:*:*:*:*","ProductID":"19970-17084","Value":"azl3 vitess 17.0.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cloud-provider-kubevirt_0.5.1-1:*:*:*:*:*:*:*:*","ProductID":"20001-17084","Value":"azl3 cloud-provider-kubevirt 0.5.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_swupdate_2021.04-1:*:*:*:*:*:*:*:*","ProductID":"20098-17086","Value":"cbl2 swupdate 2021.04-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_swupdate_2021.04-1:*:*:*:*:*:*:*:*","ProductID":"20098-21692","Value":"cbl2 swupdate 2021.04-1 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_busybox_1.35.0-14:*:*:*:*:*:*:*:*","ProductID":"20103-17086","Value":"cbl2 busybox 1.35.0-14 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_busybox_1.35.0-14:*:*:*:*:*:*:*:*","ProductID":"20103-21692","Value":"cbl2 busybox 1.35.0-14 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_frr_8.5.3-2:*:*:*:*:*:*:*:*","ProductID":"20139-17084","Value":"azl3 frr 8.5.3-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_busybox_1.36.1-13:*:*:*:*:*:*:*:*","ProductID":"20153-17084","Value":"azl3 busybox 1.36.1-13 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_grpc_1.42.0-7:*:*:*:*:*:*:*:*","ProductID":"20279-17084","Value":"azl3 grpc 1.42.0-7 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_nasm_2.16.01-2:*:*:*:*:*:*:*:*","ProductID":"21097-17084","Value":"azl3 nasm 2.16.01-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-py_1.11.0-1:*:*:*:*:*:*:*:*","ProductID":"21639-17084","Value":"azl3 python-py 1.11.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.0-1:*:*:*:*:*:*:*:*","ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.1-1:*:*:*:*:*:*:*:*","ProductID":"21809-17084","Value":"azl3 golang 1.27.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:.net:2.0:sp2:*:*:*:*:*:*","ProductID":"9292-9312","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for 32-bit Systems Service Pack 2"},{"CPE":"cpe:2.3:a:microsoft:.net:2.0:sp2:*:*:*:*:*:*","ProductID":"9292-9318","Value":"Microsoft .NET Framework 2.0 Service Pack 2 on Windows Server 2008 for x64-based Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22216:*:*:*:*:*:x64:*","ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22216:*:*:*:*:*:x86:*","ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22216:*:*:*:*:*:x86:*","ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"}]},"Vulnerability":[{"Acknowledgments":[],"CVE":"CVE-2020-18770","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16914-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["16914-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.13.74-1","ProductID":["16914-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16914-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-05-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16914-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16914-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service."}},{"Acknowledgments":[],"CVE":"CVE-2020-22217","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19187-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["19187-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"21.1.2-1","ProductID":["19187-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19187-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-02-03T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.2"},{"Date":"2025-02-04T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.3"},{"Date":"2025-02-05T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.4"},{"Date":"2025-02-07T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.5"},{"Date":"2025-02-08T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.6"},{"Date":"2025-02-10T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.8"},{"Date":"2025-02-11T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.9"},{"Date":"2025-02-12T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.0"},{"Date":"2025-02-13T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.1"},{"Date":"2025-02-16T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.4"},{"Date":"2025-02-17T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.5"},{"Date":"2025-02-19T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.7"},{"Date":"2025-02-20T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.8"},{"Date":"2025-02-23T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.1"},{"Date":"2025-02-26T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.4"},{"Date":"2025-02-27T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.5"},{"Date":"2025-03-03T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.9"},{"Date":"2025-03-05T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.1"},{"Date":"2025-03-06T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.2"},{"Date":"2025-03-12T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.7"},{"Date":"2025-03-13T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.8"},{"Date":"2025-03-18T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.3"},{"Date":"2025-03-19T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.4"},{"Date":"2025-03-21T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.6"},{"Date":"2025-03-22T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.7"},{"Date":"2025-03-23T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.8"},{"Date":"2025-03-28T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.3"},{"Date":"2025-03-29T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.4"},{"Date":"2025-03-31T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.6"},{"Date":"2025-04-01T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.7"},{"Date":"2025-04-04T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.9"},{"Date":"2025-04-05T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.0"},{"Date":"2025-04-08T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.3"},{"Date":"2025-04-09T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.4"},{"Date":"2025-04-11T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.5"},{"Date":"2025-04-13T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.7"},{"Date":"2025-04-14T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.8"},{"Date":"2025-04-15T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.9"},{"Date":"2025-04-16T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.0"},{"Date":"2025-04-19T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.3"},{"Date":"2025-04-26T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.0"},{"Date":"2025-04-28T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.1"},{"Date":"2025-04-29T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.2"},{"Date":"2025-04-30T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.3"},{"Date":"2025-05-01T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.4"},{"Date":"2025-05-03T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.6"},{"Date":"2025-05-04T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.7"},{"Date":"2025-05-06T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.9"},{"Date":"2025-05-07T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.0"},{"Date":"2025-05-08T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.1"},{"Date":"2025-05-11T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.4"},{"Date":"2025-05-13T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.6"},{"Date":"2025-05-14T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.7"},{"Date":"2025-05-17T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.0"},{"Date":"2025-05-20T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.3"},{"Date":"2025-05-21T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.4"},{"Date":"2025-05-22T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.5"},{"Date":"2025-05-25T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.8"},{"Date":"2025-05-26T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.9"},{"Date":"2026-02-18T03:14:59","Description":{"Value":"<p>Information published.</p>\n"},"Number":"12.1"},{"Date":"2023-09-04T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-02-09T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"1.7"},{"Date":"2025-02-14T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.2"},{"Date":"2025-02-15T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.3"},{"Date":"2025-02-18T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.6"},{"Date":"2025-02-21T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"2.9"},{"Date":"2025-02-22T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.0"},{"Date":"2025-02-24T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.2"},{"Date":"2025-02-25T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.3"},{"Date":"2025-02-28T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.6"},{"Date":"2025-03-01T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.7"},{"Date":"2025-03-02T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"3.8"},{"Date":"2025-03-04T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.0"},{"Date":"2025-03-08T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.3"},{"Date":"2025-03-09T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.4"},{"Date":"2025-03-10T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.5"},{"Date":"2025-03-11T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.6"},{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"4.9"},{"Date":"2025-03-15T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.0"},{"Date":"2025-03-16T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.1"},{"Date":"2025-03-17T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.2"},{"Date":"2025-03-20T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.5"},{"Date":"2025-03-24T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"5.9"},{"Date":"2025-03-25T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.0"},{"Date":"2025-03-26T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.1"},{"Date":"2025-03-27T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.2"},{"Date":"2025-03-30T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.5"},{"Date":"2025-04-03T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"6.8"},{"Date":"2025-04-06T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.1"},{"Date":"2025-04-07T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.2"},{"Date":"2025-04-12T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"7.6"},{"Date":"2025-04-17T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.1"},{"Date":"2025-04-18T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.2"},{"Date":"2025-04-20T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.4"},{"Date":"2025-04-21T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.5"},{"Date":"2025-04-22T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.6"},{"Date":"2025-04-23T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.7"},{"Date":"2025-04-24T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.8"},{"Date":"2025-04-25T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"8.9"},{"Date":"2025-05-02T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.5"},{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"9.8"},{"Date":"2025-05-09T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.2"},{"Date":"2025-05-10T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.3"},{"Date":"2025-05-12T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.5"},{"Date":"2025-05-15T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.8"},{"Date":"2025-05-16T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"10.9"},{"Date":"2025-05-18T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.1"},{"Date":"2025-05-19T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.2"},{"Date":"2025-05-23T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.6"},{"Date":"2025-05-24T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"11.7"},{"Date":"2025-05-27T00:00:00","Description":{"Value":"<p>Added grpc to Azure Linux 3.0\nAdded python-gevent to CBL-Mariner 2.0</p>\n"},"Number":"12.0"},{"Date":"2026-08-12T21:04:08","Description":{"Value":"<p>Information published.</p>\n"},"Number":"13.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19187-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19187-16823"],"Type":3}],"Title":{"Value":"Buffer overflow vulnerability in c-ares before 1_16_1 thru 1_17_0 via function ares_parse_soa_reply in ares_parse_soa_reply.c."}},{"Acknowledgments":[],"CVE":"CVE-2020-22218","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19188-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["19188-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.9.0-3","ProductID":["19188-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19188-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-04T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19188-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19188-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory."}},{"Acknowledgments":[],"CVE":"CVE-2020-22219","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19189-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["19189-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.4.3-1","ProductID":["19189-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19189-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19189-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19189-16823"],"Type":3}],"Title":{"Value":"Buffer Overflow vulnerability in function bitwriter_grow_ in flac before 1.4.0 allows remote attackers to run arbitrary code via crafted input to the encoder."}},{"Acknowledgments":[],"CVE":"CVE-2020-35357","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19206-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input (&#39;Classic Buffer Overflow&#39;)"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["19206-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.8-1","ProductID":["19206-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19206-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-05-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19206-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19206-17084"],"Type":3}],"Title":{"Value":"A buffer overflow can occur when calculating the quantile value using the Statistics Library of GSL (GNU Scientific Library), versions 2.5 and 2.6. Processing a maliciously crafted input data for gsl_stats_quantile_from_sorted_data of the library may lead to unexpected application termination or arbitrary code execution."}},{"Acknowledgments":[],"CVE":"CVE-2021-32292","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19178-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["19178-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.15-2","ProductID":["19178-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19178-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T01:17:16","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2023-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19178-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["19178-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit."}},{"Acknowledgments":[],"CVE":"CVE-2021-34193","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19459-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["19459-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.23.0-1","ProductID":["19459-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19459-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19459-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19459-16823"],"Type":3}],"Title":{"Value":"Stack overflow vulnerability in OpenSC smart card middleware before 0.23 via crafted responses to APDUs."}},{"Acknowledgments":[],"CVE":"CVE-2022-26592","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18827-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["18827-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.6.6-1","ProductID":["18827-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18827-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Added libsass to Azure Linux 3.0\nAdded reaper to CBL-Mariner 2.0</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18827-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18827-17084"],"Type":3}],"Title":{"Value":"Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function."}},{"Acknowledgments":[],"CVE":"CVE-2022-35205","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18365-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-617","Value":"Reachable Assertion"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["18365-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.37-10","ProductID":["18365-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18365-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18365-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18365-16823"],"Type":3}],"Title":{"Value":"Reachable assertion failure in function display_debug_names allows attackers to cause a denial of service."}},{"Acknowledgments":[],"CVE":"CVE-2022-36648","CVSSScoreSets":[{"BaseScore":10.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18535-17084"],"TemporalScore":10.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["18535-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.2.0-18","ProductID":["18535-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18535-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-08-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-08-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-08-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-08-10T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-08-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-08-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-08-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-08-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-08-18T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-08-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.3"},{"Date":"2024-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.4"},{"Date":"2024-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.5"},{"Date":"2024-08-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.6"},{"Date":"2024-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2024-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.8"},{"Date":"2024-08-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.9"},{"Date":"2024-08-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.1"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.2"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.3"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.4"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.5"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.6"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.7"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.8"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.9"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18535-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18535-17084"],"Type":3}],"Title":{"Value":"The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in QEMU as used in 7.0.0 and earlier allows remote attackers to crash the host qemu and potentially execute code on the host via execute a malformed program in the guest OS. Note: This has been disputed by multiple third parties as not a valid vulnerability due to the rocker device not falling within the virtualization use case."}},{"Acknowledgments":[],"CVE":"CVE-2022-43357","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18827-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["18827-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.6.6-1","ProductID":["18827-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18827-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18827-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18827-17084"],"Type":3}],"Title":{"Value":"Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which can be exploited by attackers to causea denial of service (DoS). Also affects the command line driver for libsass, sassc 3.6.2."}},{"Acknowledgments":[],"CVE":"CVE-2022-43358","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18827-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["18827-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.6.6-1","ProductID":["18827-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18827-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18827-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18827-17084"],"Type":3}],"Title":{"Value":"Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can be exploited by attackers to cause a denial of service (DoS)."}},{"Acknowledgments":[],"CVE":"CVE-2022-47007","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19514-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-401","Value":"Missing Release of Memory after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["19514-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.37-9","ProductID":["19514-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19514-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19514-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19514-16823"],"Type":3}],"Title":{"Value":"function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38 allows attackers to cause a denial of service due to memory leaks"}},{"Acknowledgments":[],"CVE":"CVE-2022-47008","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19514-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-401","Value":"Missing Release of Memory after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["19514-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.37-9","ProductID":["19514-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19514-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19514-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19514-16823"],"Type":3}],"Title":{"Value":"function make_tempdir and make_tempname in bucomm.c in Binutils 2.34 thru 2.38 allows attackers to cause a denial of service due to memory leaks."}},{"Acknowledgments":[],"CVE":"CVE-2022-47010","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19514-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-401","Value":"Missing Release of Memory after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["19514-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.37-9","ProductID":["19514-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19514-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19514-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19514-16823"],"Type":3}],"Title":{"Value":"function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38 allows attackers to cause a denial of service due to memory leaks."}},{"Acknowledgments":[],"CVE":"CVE-2022-47011","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19514-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-401","Value":"Missing Release of Memory after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"15","ProductStatuses":[{"ProductID":["19514-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.37-9","ProductID":["19514-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19514-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19514-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19514-16823"],"Type":3}],"Title":{"Value":"function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38 allows attackers to cause a denial of service due to memory leaks."}},{"Acknowledgments":[],"CVE":"CVE-2022-47022","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18838-17084"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18839-17084"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["18838-17084","18839-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.1.7-2","ProductID":["18838-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18838-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.9.2-2","ProductID":["18839-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18839-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-02-01T00:00:00","Description":{"Value":"<p>Added openmpi to CBL-Mariner 2.0\nAdded hwloc to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2025-02-11T00:00:00","Description":{"Value":"<p>Added hwloc to Azure Linux 3.0\nAdded openmpi to CBL-Mariner 2.0\nAdded hwloc to CBL-Mariner 2.0</p>\n"},"Number":"1.2"},{"Date":"2026-02-19T01:03:41","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2023-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-02-20T00:00:00","Description":{"Value":"<p>Added openmpi to Azure Linux 3.0\nAdded hwloc to Azure Linux 3.0\nAdded openmpi to CBL-Mariner 2.0\nAdded hwloc to CBL-Mariner 2.0</p>\n"},"Number":"1.3"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18838-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18839-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18838-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18839-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c."}},{"Acknowledgments":[],"CVE":"CVE-2022-47069","CVSSScoreSets":[{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16884-17084"],"TemporalScore":6.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"17","ProductStatuses":[{"ProductID":["16884-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["16884-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16884-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-09-05T01:44:16","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2025-09-03T20:17:57","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-10-30T01:43:44","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16884-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16884-17084"],"Type":3}],"Title":{"Value":"p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur."}},{"Acknowledgments":[],"CVE":"CVE-2022-47673","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18844-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18344-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"18","ProductStatuses":[{"ProductID":["18844-17084","18344-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.0.4-4","ProductID":["18844-17084","18344-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18844-17084","18344-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-04-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2025-04-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:31:28","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18844-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18344-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18844-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18344-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a denial of service or other unspecified impacts."}},{"Acknowledgments":[],"CVE":"CVE-2022-47696","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18844-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18344-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"19","ProductStatuses":[{"ProductID":["18844-17084","18344-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.0.4-4","ProductID":["18844-17084","18344-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18844-17084","18344-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-04-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-04-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-02-18T01:30:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18844-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18344-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18844-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18344-17084"],"Type":3}],"Title":{"Value":"An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function compare_symbols."}},{"Acknowledgments":[],"CVE":"CVE-2022-48063","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18365-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-400","Value":"Uncontrolled Resource Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"20","ProductStatuses":[{"ProductID":["18365-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.37-10","ProductID":["18365-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18365-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18365-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18365-16823"],"Type":3}],"Title":{"Value":"GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c."}},{"Acknowledgments":[],"CVE":"CVE-2022-48064","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19515-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-770","Value":"Allocation of Resources Without Limits or Throttling"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"21","ProductStatuses":[{"ProductID":["19515-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"11.2-5","ProductID":["19515-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19515-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-04-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19515-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19515-16823"],"Type":3}],"Title":{"Value":"GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack."}},{"Acknowledgments":[],"CVE":"CVE-2022-48065","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19515-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-401","Value":"Missing Release of Memory after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"22","ProductStatuses":[{"ProductID":["19515-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"11.2-5","ProductID":["19515-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19515-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-04-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19515-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19515-16823"],"Type":3}],"Title":{"Value":"GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c."}},{"Acknowledgments":[],"CVE":"CVE-2022-48174","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19516-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20103-17086"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20103-21692"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20153-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"23","ProductStatuses":[{"ProductID":["19516-16823","20103-17086","20103-21692","20153-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.35.0-13","ProductID":["19516-16823","20103-17086","20103-21692"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19516-16823","20103-17086","20103-21692"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.36.1-14","ProductID":["20153-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20153-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-07-15T00:00:00","Description":{"Value":"<p>Added busybox to Azure Linux 3.0\nAdded busybox to CBL-Mariner 2.0</p>\n"},"Number":"2.0"},{"Date":"2026-02-19T01:09:13","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2025-02-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-08-12T23:19:14","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19516-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20103-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20103-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20153-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["19516-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["20103-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["20103-21692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["20153-17084"],"Type":3}],"Title":{"Value":"There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution."}},{"Acknowledgments":[],"CVE":"CVE-2022-48554","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19517-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"24","ProductStatuses":[{"ProductID":["19517-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.40-3","ProductID":["19517-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19517-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19517-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19517-16823"],"Type":3}],"Title":{"Value":"File before 5.43 has an stack-based buffer over-read in file_copystr in funcs.c."}},{"Acknowledgments":[],"CVE":"CVE-2022-48579","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18845-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"25","ProductStatuses":[{"ProductID":["18845-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.105.2-4","ProductID":["18845-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18845-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18845-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18845-17084"],"Type":3}],"Title":{"Value":"UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains."}},{"Acknowledgments":[],"CVE":"CVE-2023-28736","CVSSScoreSets":[{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18331-16823"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18332-17084"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":5.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19764-17084"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"intel","Type":8,"Value":"intel"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"26","ProductStatuses":[{"ProductID":["18331-16823","18332-17084","19764-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.1-10","ProductID":["18331-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18331-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.2-1","ProductID":["18332-17084","19764-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18332-17084","19764-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-02-17T00:00:00","Description":{"Value":"<p>Added mdadm to CBL-Mariner 2.0\nAdded mdadm to Azure Linux 3.0</p>\n"},"Number":"1.1"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:06:28","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18331-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18332-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19764-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18331-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18332-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19764-17084"],"Type":3}],"Title":{"Value":"Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access."}},{"Acknowledgments":[],"CVE":"CVE-2023-28938","CVSSScoreSets":[{"BaseScore":3.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19764-17084"],"TemporalScore":3.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L"},{"BaseScore":4.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18332-17084"],"TemporalScore":4.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-400","Value":"Uncontrolled Resource Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"intel","Type":8,"Value":"intel"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"27","ProductStatuses":[{"ProductID":["19764-17084","18332-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.2-1","ProductID":["19764-17084","18332-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19764-17084","18332-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-07-11T00:00:00","Description":{"Value":"<p>Added mdadm to CBL-Mariner 2.0\nAdded mdadm to Azure Linux 3.0</p>\n"},"Number":"2.0"},{"Date":"2026-02-18T01:07:13","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19764-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18332-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19764-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18332-17084"],"Type":3}],"Title":{"Value":"Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access."}},{"Acknowledgments":[],"CVE":"CVE-2023-2906","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18324-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-369","Value":"Divide By Zero"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"AHA","Type":8,"Value":"AHA"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"28","ProductStatuses":[{"ProductID":["18324-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.0.8-1","ProductID":["18324-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18324-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-07-11T00:00:00","Description":{"Value":"<p>Added wireshark to Azure Linux 3.0\nAdded wireshark to CBL-Mariner 2.0</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18324-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18324-16823"],"Type":3}],"Title":{"Value":"Wireshark CP2179 divide by zero"}},{"Acknowledgments":[],"CVE":"CVE-2023-29409","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19785-17086"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17375-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18140-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18138-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18141-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19778-17086"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"CWE":[{"ID":"CWE-400","Value":"Uncontrolled Resource Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Go","Type":8,"Value":"Go"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"29","ProductStatuses":[{"ProductID":["19785-17086","21778-17084","17375-16823","18140-16823","18138-16823","18141-17084","19778-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19785-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19785-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.6-1","ProductID":["17375-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17375-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.20.7-1","ProductID":["18140-16823","18138-16823","18141-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18140-16823","18138-16823","18141-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-09-07T01:43:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-09-17T01:51:28","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2025-09-04T02:10:32","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:56:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-09-03T01:07:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-09T14:50:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19785-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17375-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18140-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18138-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18141-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19778-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19785-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21778-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17375-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18140-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18138-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18141-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19778-17086"],"Type":3}],"Title":{"Value":"Large RSA keys can cause high CPU usage in crypto/tls"}},{"Acknowledgments":[],"CVE":"CVE-2023-3180","CVSSScoreSets":[{"BaseScore":6.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18535-17084"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18160-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18233-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"30","ProductStatuses":[{"ProductID":["18535-17084","18160-16823","18233-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.2.0-1","ProductID":["18535-17084","18233-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18535-17084","18233-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.2.0-23","ProductID":["18160-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18160-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-04-17T00:00:00","Description":{"Value":"<p>Added qemu to CBL-Mariner 2.0\nAdded qemu to Azure Linux 3.0</p>\n"},"Number":"1.1"},{"Date":"2026-02-18T01:44:57","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18535-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18160-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18233-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18535-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18160-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18233-17084"],"Type":3}],"Title":{"Value":"Heap buffer overflow in virtio_crypto_sym_op_helper()"}},{"Acknowledgments":[],"CVE":"CVE-2023-32003","CVSSScoreSets":[],"CWE":[{"ID":"CWE-22","Value":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"hackerone","Type":8,"Value":"hackerone"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"31","ProductStatuses":[],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2023-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[],"Title":{"Value":"`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp() API and the impact is a malicious actor could create an arbitrary directory.\n\nThis vulnerability affects all users using the experimental permission model in Node.js 20.\n\nPlease note that at the time this CVE was issued the permission model is an experimental feature of Node.js."}},{"Acknowledgments":[],"CVE":"CVE-2023-32004","CVSSScoreSets":[],"CWE":[{"ID":"CWE-22","Value":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"hackerone","Type":8,"Value":"hackerone"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"32","ProductStatuses":[],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[],"Title":{"Value":"A vulnerability has been discovered in Node.js version 20 specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions.\n\nThis vulnerability affects all users using the experimental permission model in Node.js 20.\n\nPlease note that at the time this CVE was issued the permission model is an experimental feature of Node.js."}},{"Acknowledgments":[],"CVE":"CVE-2023-32006","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17454-16823"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17866-16823"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"hackerone","Type":8,"Value":"hackerone"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"33","ProductStatuses":[{"ProductID":["17454-16823","17866-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"16.20.2-2","ProductID":["17454-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17454-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"18.17.1-2","ProductID":["17866-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17866-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-22T00:00:00","Description":{"Value":"<p>Added nodejs to CBL-Mariner 2.0</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17454-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17866-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17454-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17866-16823"],"Type":3}],"Title":{"Value":"The use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module.\n\nThis vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x 18.x and 20.x.\n\nPlease note that at the time this CVE was issued the policy is an experimental feature of Node.js."}},{"Acknowledgments":[],"CVE":"CVE-2023-32559","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17866-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17454-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-269","Value":"Improper Privilege Management"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"hackerone","Type":8,"Value":"hackerone"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"34","ProductStatuses":[{"ProductID":["17866-16823","17454-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"18.17.1-2","ProductID":["17866-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17866-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"16.20.2-2","ProductID":["17454-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17454-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17866-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17454-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17866-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17454-16823"],"Type":3}],"Title":{"Value":"A privilege escalation vulnerability exists in the experimental policy mechanism in all active release lines: 16.x 18.x and 20.x. The use of the deprecated API `process.binding()` can bypass the policy mechanism by requiring internal modules and eventually take advantage of `process.binding('spawn_sync')` run arbitrary code outside of the limits defined in a `policy.json` file. Please note that at the time this CVE was issued the policy is an experimental feature of Node.js."}},{"Acknowledgments":[],"CVE":"CVE-2023-33953","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20279-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18133-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17871-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-770","Value":"Allocation of Resources Without Limits or Throttling"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Google","Type":8,"Value":"Google"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"35","ProductStatuses":[{"ProductID":["20279-17084","18133-16823","17871-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.62.0-2","ProductID":["20279-17084","17871-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20279-17084","17871-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.11.0-2","ProductID":["18133-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18133-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:34:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-02-18T03:13:15","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-17T20:51:59","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-08-17T20:52:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20279-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18133-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17871-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20279-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18133-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17871-17084"],"Type":3}],"Title":{"Value":"Denial-of-Service in gRPC"}},{"Acknowledgments":[],"CVE":"CVE-2023-36054","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18335-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-824","Value":"Access of Uninitialized Pointer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"36","ProductStatuses":[{"ProductID":["18335-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.19.4-2","ProductID":["18335-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18335-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:35:42","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2023-08-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18335-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18335-16823"],"Type":3}],"Title":{"Value":"lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count."}},{"Acknowledgments":[],"CVE":"CVE-2023-37369","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18333-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"37","ProductStatuses":[{"ProductID":["18333-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.12.11-9","ProductID":["18333-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18333-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:36:37","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2023-08-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18333-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18333-16823"],"Type":3}],"Title":{"Value":"In Qt before 5.15.15 6.x before 6.2.9 and 6.3.x through 6.5.x before 6.5.2 there can be an application crash in QXmlStreamReader via a crafted XML string that triggers a situation in which a prefix is greater than a length."}},{"Acknowledgments":[],"CVE":"CVE-2023-3823","CVSSScoreSets":[{"BaseScore":8.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19269-17084"],"TemporalScore":8.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18329-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-611","Value":"Improper Restriction of XML External Entity Reference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"php","Type":8,"Value":"php"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"38","ProductStatuses":[{"ProductID":["19269-17084","18329-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.2.8-1","ProductID":["19269-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19269-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.1.22-1","ProductID":["18329-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18329-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:37:13","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-08-13T00:07:38","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19269-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18329-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19269-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18329-16823"],"Type":3}],"Title":{"Value":"Security issue with external entity loading in XML without enabling it"}},{"Acknowledgments":[],"CVE":"CVE-2023-3824","CVSSScoreSets":[{"BaseScore":9.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19269-17084"],"TemporalScore":9.4,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18329-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-119","Value":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"php","Type":8,"Value":"php"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"39","ProductStatuses":[{"ProductID":["19269-17084","18329-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.2.8-1","ProductID":["19269-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19269-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.1.22-1","ProductID":["18329-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18329-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:37:17","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-08-13T00:06:32","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2023-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19269-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18329-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["19269-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18329-16823"],"Type":3}],"Title":{"Value":"Buffer overflow and overread in phar_dir_read()"}},{"Acknowledgments":[],"CVE":"CVE-2023-38497","CVSSScoreSets":[{"BaseScore":7.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17953-16823"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-278","Value":"Insecure Preserved Inherited Permissions"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"GitHub_M","Type":8,"Value":"GitHub_M"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"40","ProductStatuses":[{"ProductID":["17953-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.72.0-2","ProductID":["17953-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17953-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17953-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17953-16823"],"Type":3}],"Title":{"Value":"Cargo not respecting umask when extracting crate archives"}},{"Acknowledgments":[],"CVE":"CVE-2023-38697","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18336-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"CWE":[{"ID":"CWE-444","Value":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"GitHub_M","Type":8,"Value":"GitHub_M"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"41","ProductStatuses":[{"ProductID":["18336-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.15.1-1","ProductID":["18336-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18336-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18336-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18336-16823"],"Type":3}],"Title":{"Value":" protocol-http1 HTTP Request/Response Smuggling vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-38710","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19899-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18327-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18328-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"42","ProductStatuses":[{"ProductID":["19899-17084","18327-16823","18328-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.7-6","ProductID":["19899-17084","18328-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19899-17084","18328-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.7-5","ProductID":["18327-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18327-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-19T01:17:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19899-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18327-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18328-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19899-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18327-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18328-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in Libreswan before 4.12. When an IKEv2 Child SA REKEY packet contains an invalid IPsec protocol ID number of 0 or 1 an error notify INVALID_SPI is sent back. The notify payload's protocol ID is copied from the incoming packet but the code that verifies outgoing packets fails an assertion that the protocol ID must be ESP (2) or AH(3) and causes the pluto daemon to crash and restart. NOTE: the earliest affected version is 3.20."}},{"Acknowledgments":[],"CVE":"CVE-2023-38711","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19899-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18327-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18328-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"43","ProductStatuses":[{"ProductID":["19899-17084","18327-16823","18328-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.7-6","ProductID":["19899-17084","18328-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19899-17084","18328-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.7-5","ProductID":["18327-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18327-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-19T01:17:59","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19899-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18327-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18328-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19899-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18327-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18328-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in Libreswan before 4.12. When an IKEv1 Quick Mode connection configured with ID_IPV4_ADDR or ID_IPV6_ADDR receives an IDcr payload with ID_FQDN a NULL pointer dereference causes a crash and restart of the pluto daemon. NOTE: the earliest affected version is 4.6."}},{"Acknowledgments":[],"CVE":"CVE-2023-38712","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19899-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18327-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18328-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"44","ProductStatuses":[{"ProductID":["19899-17084","18327-16823","18328-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.7-6","ProductID":["19899-17084","18328-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19899-17084","18328-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.7-5","ProductID":["18327-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18327-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-19T01:18:09","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19899-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18327-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18328-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19899-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18327-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18328-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in Libreswan 3.x and 4.x before 4.12. When an IKEv1 ISAKMP SA Informational Exchange packet contains a Delete/Notify payload followed by further Notifies that act on the ISAKMP SA such as a duplicated Delete/Notify message a NULL pointer dereference on the deleted state causes the pluto daemon to crash and restart."}},{"Acknowledgments":[],"CVE":"CVE-2023-38802","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18323-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-354","Value":"Improper Validation of Integrity Check Value"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"45","ProductStatuses":[{"ProductID":["18323-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.5.3-2","ProductID":["18323-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18323-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18323-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18323-16823"],"Type":3}],"Title":{"Value":"FRRouting FRR 7.5.1 through 9.0 and Pica8 PICOS 4.3.3.2 allow a remote attacker to cause a denial of service via a crafted BGP update with a corrupted attribute 23 (Tunnel Encapsulation)."}},{"Acknowledgments":[],"CVE":"CVE-2023-3896","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18334-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-369","Value":"Divide By Zero"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"OpenCloudOS","Type":8,"Value":"OpenCloudOS"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"46","ProductStatuses":[{"ProductID":["18334-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"9.0.1562-2","ProductID":["18334-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18334-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18334-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18334-16823"],"Type":3}],"Title":{"Value":"A divide by zero issue existed in vim of OpenCloudOS Stream"}},{"Acknowledgments":[],"CVE":"CVE-2023-39417","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18239-16823"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-89","Value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"47","ProductStatuses":[{"ProductID":["18239-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.10-1","ProductID":["18239-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18239-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18239-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18239-16823"],"Type":3}],"Title":{"Value":"Postgresql: extension script @substitutions@ within quoting allow sql injection"}},{"Acknowledgments":[],"CVE":"CVE-2023-39533","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19778-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19785-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17375-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18148-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18149-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18150-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-770","Value":"Allocation of Resources Without Limits or Throttling"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"GitHub_M","Type":8,"Value":"GitHub_M"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"48","ProductStatuses":[{"ProductID":["19778-17086","19785-17086","17375-16823","18148-16823","18149-16823","18150-17084","21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19778-17086","19785-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19778-17086","19785-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.6-1","ProductID":["17375-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17375-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.19.12-1","ProductID":["18148-16823","18149-16823","18150-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18148-16823","18149-16823","18150-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2026-10-21T18:39:05","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2026-02-18T02:33:56","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-09-17T01:54:23","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"},{"Date":"2025-09-03T23:37:27","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-09-03T01:12:21","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-09-08T14:49:19","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-09T14:58:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19778-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19785-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17375-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18148-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18149-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18150-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19778-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19785-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17375-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18148-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18149-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18150-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"libp2p nodes vulnerable to attack using large RSA keys"}},{"Acknowledgments":[],"CVE":"CVE-2023-39742","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19085-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18325-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18326-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input (&#39;Classic Buffer Overflow&#39;)"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"49","ProductStatuses":[{"ProductID":["19085-17084","18325-16823","18326-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.2.1-8","ProductID":["19085-17084","18325-16823","18326-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19085-17084","18325-16823","18326-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-02-17T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T03:08:57","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2025-02-20T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19085-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18325-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18326-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19085-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18325-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18326-17084"],"Type":3}],"Title":{"Value":"giflib v5.2.1 was discovered to contain a segmentation fault via the component getarg.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-3978","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19928-17086"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17515-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19346-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19959-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19966-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19664-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19970-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18130-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18184-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18185-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18186-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17341-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18187-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17402-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18188-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16898-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18164-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17786-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18189-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18190-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17766-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17587-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19863-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19345-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Go","Type":8,"Value":"Go"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"50","ProductStatuses":[{"ProductID":["19928-17086","17515-17084","19346-17084","19959-17084","19966-17084","19664-17084","19970-17084","18130-16823","18184-16823","18185-16823","18186-16823","17341-16823","18187-16823","17402-16823","18188-17084","16898-17084","18164-17084","17786-17084","18189-17084","18190-17084","17766-17084","17587-17084","19863-17084","19345-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.10.1-1","ProductID":["19928-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19928-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.7.7-1","ProductID":["17515-17084","17587-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17515-17084","17587-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.57.0-12","ProductID":["19346-17084","18190-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19346-17084","18190-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.2.0-1","ProductID":["19959-17084","18189-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19959-17084","18189-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.12.0-1","ProductID":["19966-17084","17786-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19966-17084","17786-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.29.4-1","ProductID":["19664-17084","18164-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19664-17084","18164-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"19.0.4-2","ProductID":["19970-17084","16898-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19970-17084","16898-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.9.5-3","ProductID":["18130-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18130-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.0.2-5","ProductID":["18184-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18184-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.3.0-6","ProductID":["18185-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18185-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.27.4-1","ProductID":["18186-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18186-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"17.0.7-1","ProductID":["17341-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17341-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.59.0-24","ProductID":["18187-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18187-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.11.2-14","ProductID":["17402-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17402-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.0.2-2","ProductID":["18188-17084","19345-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18188-17084","19345-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.12.12-1","ProductID":["17766-17084","19863-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17766-17084","19863-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:39:12","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2024-10-15T00:00:00","Description":{"Value":"<p>Added multus to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded prometheus-adapter to Azure Linux 3.0\nAdded vitess to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded multus to CBL-Mariner 2.0\nAdded vitess to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0</p>\n"},"Number":"3.1"},{"Date":"2024-11-01T00:00:00","Description":{"Value":"<p>Added cni-plugins to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded multus to CBL-Mariner 2.0\nAdded vitess to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded multus to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded prometheus-adapter to Azure Linux 3.0\nAdded vitess to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0</p>\n"},"Number":"3.2"},{"Date":"2024-12-03T00:00:00","Description":{"Value":"<p>Added cert-manager to CBL-Mariner 2.0\nAdded multus to CBL-Mariner 2.0\nAdded cni-plugins to CBL-Mariner 2.0\nAdded vitess to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded multus to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded prometheus-adapter to Azure Linux 3.0\nAdded vitess to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0</p>\n"},"Number":"3.3"},{"Date":"2025-02-11T00:00:00","Description":{"Value":"<p>Added application-gateway-kubernetes-ingress to Azure Linux 3.0\nAdded multus to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded prometheus-adapter to Azure Linux 3.0\nAdded vitess to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded multus to CBL-Mariner 2.0\nAdded cni-plugins to CBL-Mariner 2.0\nAdded vitess to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0</p>\n"},"Number":"3.4"},{"Date":"2026-02-18T02:44:49","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.7"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-01-18T00:00:00","Description":{"Value":"<p>Added packer to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-07-10T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-08-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-08-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.3"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.4"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.5"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.6"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.8"},{"Date":"2024-09-13T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.9"},{"Date":"2024-10-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2025-02-16T00:00:00","Description":{"Value":"<p>Added kubevirt to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded multus to CBL-Mariner 2.0\nAdded cni-plugins to CBL-Mariner 2.0\nAdded vitess to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded application-gateway-kubernetes-ingress to Azure Linux 3.0\nAdded multus to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded prometheus-adapter to Azure Linux 3.0\nAdded vitess to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0</p>\n"},"Number":"3.5"},{"Date":"2025-03-13T00:00:00","Description":{"Value":"<p>Added containerized-data-importer to Azure Linux 3.0\nAdded application-gateway-kubernetes-ingress to Azure Linux 3.0\nAdded multus to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded prometheus-adapter to Azure Linux 3.0\nAdded vitess to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded kubevirt to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded multus to CBL-Mariner 2.0\nAdded cni-plugins to CBL-Mariner 2.0\nAdded vitess to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0</p>\n"},"Number":"3.6"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19928-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17515-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19346-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19959-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19966-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19664-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19970-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18130-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18184-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18185-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18186-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17341-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18187-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17402-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18188-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16898-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18164-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17786-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18189-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18190-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17766-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17587-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19863-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19345-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19928-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17515-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19346-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19959-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19966-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19664-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19970-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18130-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18184-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18185-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18186-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17341-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18187-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17402-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18188-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16898-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18164-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17786-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18189-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18190-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17766-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17587-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19863-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19345-17084"],"Type":3}],"Title":{"Value":"Improper rendering of text nodes in golang.org/x/net/html"}},{"Acknowledgments":[],"CVE":"CVE-2023-39810","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20103-17086"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20103-21692"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18015-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19943-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-22","Value":"Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;)"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"51","ProductStatuses":[{"ProductID":["20103-17086","20103-21692","18015-17084","19943-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.35.0-14","ProductID":["20103-17086","20103-21692"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20103-17086","20103-21692"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.36.1-11","ProductID":["18015-17084","19943-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18015-17084","19943-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:39:16","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2025-05-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-21T04:18:01","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-12T23:59:05","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20103-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20103-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18015-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19943-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20103-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20103-21692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18015-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19943-17084"],"Type":3}],"Title":{"Value":"An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal."}},{"Acknowledgments":[],"CVE":"CVE-2023-39976","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18416-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input (&#39;Classic Buffer Overflow&#39;)"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"52","ProductStatuses":[{"ProductID":["18416-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.0.8-1","ProductID":["18416-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18416-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18416-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18416-17084"],"Type":3}],"Title":{"Value":"log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered."}},{"Acknowledgments":[],"CVE":"CVE-2023-40030","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17953-16823"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"GitHub_M","Type":8,"Value":"GitHub_M"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"53","ProductStatuses":[{"ProductID":["17953-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.72.0-2","ProductID":["17953-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17953-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-21T04:02:10","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2023-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17953-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17953-16823"],"Type":3}],"Title":{"Value":"Malicious dependencies can inject arbitrary JavaScript into cargo-generated timing reports"}},{"Acknowledgments":[],"CVE":"CVE-2023-40217","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17386-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"54","ProductStatuses":[{"ProductID":["17386-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.9.19-1","ProductID":["17386-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17386-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T18:39:18","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2023-10-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-10-21T01:08:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-10-28T01:48:45","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17386-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17386-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in Python before 3.8.18 3.9.x before 3.9.18 3.10.x before 3.10.13 and 3.11.x before 3.11.5. It primarily affects servers (such as HTTP servers) that use TLS client authentication. If a TLS server-side socket is created receives data into the socket buffer and then is closed quickly there is a brief window where the SSLSocket instance will detect the socket as \"not connected\" and won't initiate a handshake but buffered data will still be readable from the socket buffer. This data will not be authenticated if the server-side TLS peer is expecting client certificate authentication and is indistinguishable from valid TLS stream data. Data is limited in size to the amount that will fit in the buffer. (The TLS connection cannot directly be used for data exfiltration because the vulnerable code path requires that the connection be closed on initialization of the SSLSocket.)"}},{"Acknowledgments":[],"CVE":"CVE-2023-40225","CVSSScoreSets":[{"BaseScore":7.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17219-16823"],"TemporalScore":7.2,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-444","Value":"Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"55","ProductStatuses":[{"ProductID":["17219-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.4.24-1","ProductID":["17219-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17219-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17219-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17219-16823"],"Type":3}],"Title":{"Value":"HAProxy through 2.0.32 2.1.x and 2.2.x through 2.2.30 2.3.x and 2.4.x through 2.4.23 2.5.x and 2.6.x before 2.6.15 2.7.x before 2.7.10 and 2.8.x before 2.8.2 forwards empty Content-Length headers violating RFC 9110 section 8.6. In uncommon cases an HTTP/1 server behind HAProxy may interpret the payload as an extra request."}},{"Acknowledgments":[],"CVE":"CVE-2023-40283","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"56","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled."}},{"Acknowledgments":[],"CVE":"CVE-2023-40305","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18410-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"57","ProductStatuses":[{"ProductID":["18410-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.2.13-1","ProductID":["18410-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18410-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-03-14T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18410-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18410-17084"],"Type":3}],"Title":{"Value":"GNU indent 2.2.13 has a heap-based buffer overflow in search_brace in indent.c via a crafted file."}},{"Acknowledgments":[],"CVE":"CVE-2023-40359","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18330-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"58","ProductStatuses":[{"ProductID":["18330-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"380-1","ProductID":["18330-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18330-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18330-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18330-16823"],"Type":3}],"Title":{"Value":"xterm before 380 supports ReGIS reporting for character-set names even if they have unexpected characters (i.e. neither alphanumeric nor underscore) aka a pointer/overflow issue. This can only occur for xterm installations that are configured at compile time to use a certain experimental feature."}},{"Acknowledgments":[],"CVE":"CVE-2023-4128","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"59","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206 CVE-2023-4207 CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206 CVE-2023-4207 CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206 CVE-2023-4207 CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."}},{"Acknowledgments":[],"CVE":"CVE-2023-4132","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"60","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-10T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: smsusb: use-after-free caused by do_submit_urb()"}},{"Acknowledgments":[],"CVE":"CVE-2023-41358","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18323-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"61","ProductStatuses":[{"ProductID":["18323-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.5.3-2","ProductID":["18323-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18323-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18323-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18323-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c processes NLRIs if the attribute length is zero."}},{"Acknowledgments":[],"CVE":"CVE-2023-41359","CVSSScoreSets":[{"BaseScore":9.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18323-16823"],"TemporalScore":9.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"62","ProductStatuses":[{"ProductID":["18323-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.5.3-2","ProductID":["18323-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18323-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18323-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18323-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in FRRouting FRR through 9.0. There is an out-of-bounds read in bgp_attr_aigp_valid in bgpd/bgp_attr.c because there is no check for the availability of two bytes during AIGP validation."}},{"Acknowledgments":[],"CVE":"CVE-2023-41360","CVSSScoreSets":[{"BaseScore":9.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18323-16823"],"TemporalScore":9.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"63","ProductStatuses":[{"ProductID":["18323-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.5.3-2","ProductID":["18323-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18323-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18323-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18323-16823"],"Type":3}],"Title":{"Value":"An issue was discovered in FRRouting FRR through 9.0. bgpd/bgp_packet.c can read the initial byte of the ORF header in an ahead-of-stream situation."}},{"Acknowledgments":[],"CVE":"CVE-2023-4147","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"64","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: netfilter: nf_tables_newrule when adding a rule with nfta_rule_chain_id leads to use-after-free"}},{"Acknowledgments":[],"CVE":"CVE-2023-4194","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-863","Value":"Incorrect Authorization"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"65","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid"}},{"Acknowledgments":[],"CVE":"CVE-2023-4273","CVSSScoreSets":[{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18322-16823"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18282-16823"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"66","ProductStatuses":[{"ProductID":["18322-16823","18282-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.131.1-1","ProductID":["18322-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18322-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.131.1-2","ProductID":["18282-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18282-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-09-05T00:00:00","Description":{"Value":"<p>Added hyperv-daemons to CBL-Mariner 2.0</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18322-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18282-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18322-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18282-16823"],"Type":3}],"Title":{"Value":"Kernel: exfat: stack overflow in exfat_get_uniname_from_ext_entry"}},{"Acknowledgments":[],"CVE":"CVE-2023-4385","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"67","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: jfs: null pointer dereference in dbfree()"}},{"Acknowledgments":[],"CVE":"CVE-2023-4387","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"68","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: vmxnet3: use-after-free in vmxnet3_rq_alloc_rx_buf()"}},{"Acknowledgments":[],"CVE":"CVE-2023-4389","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-415","Value":"Double Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"69","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: btrfs: double free in btrfs_get_root_ref()"}},{"Acknowledgments":[],"CVE":"CVE-2023-4394","CVSSScoreSets":[{"BaseScore":6.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18282-16823"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"70","ProductStatuses":[{"ProductID":["18282-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.131.1-2","ProductID":["18282-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18282-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-24T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18282-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18282-16823"],"Type":3}],"Title":{"Value":"Memory leak in btrfs_get_dev_args_from_path()"}},{"Acknowledgments":[],"CVE":"CVE-2023-4459","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17832-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"71","ProductStatuses":[{"ProductID":["17832-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.126.1-1","ProductID":["17832-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17832-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17832-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17832-16823"],"Type":3}],"Title":{"Value":"Kernel: vmxnet3: null pointer dereference in vmxnet3_rq_cleanup()"}},{"Acknowledgments":[],"CVE":"CVE-2023-4569","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18282-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-401","Value":"Missing Release of Memory after Effective Lifetime"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"72","ProductStatuses":[{"ProductID":["18282-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.131.1-2","ProductID":["18282-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18282-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18282-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18282-16823"],"Type":3}],"Title":{"Value":"Kernel: information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c"}},{"Acknowledgments":[],"CVE":"CVE-2023-4611","CVSSScoreSets":[{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17917-16823"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"73","ProductStatuses":[{"ProductID":["17917-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.135.1-2","ProductID":["17917-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17917-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17917-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17917-16823"],"Type":3}],"Title":{"Value":"Use after free race between mbind() and vma-locked page fault"}},{"Acknowledgments":[],"CVE":"CVE-2022-48560","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21639-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"74","ProductStatuses":[{"ProductID":["21639-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["21639-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21639-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T01:07:58","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21639-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21639-17084"],"Type":3}],"Title":{"Value":"A use-after-free exists in Python through 3.9 via heappushpop in heapq."}},{"Acknowledgments":[],"CVE":"CVE-2022-48564","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21639-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-400","Value":"Uncontrolled Resource Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"75","ProductStatuses":[{"ProductID":["21639-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["21639-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21639-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T01:08:06","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21639-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21639-17084"],"Type":3}],"Title":{"Value":"read_ints in plistlib.py in Python through 3.9.1 is vulnerable to a potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format."}},{"Acknowledgments":[],"CVE":"CVE-2022-48565","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21639-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-611","Value":"Improper Restriction of XML External Entity Reference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"76","ProductStatuses":[{"ProductID":["21639-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["21639-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21639-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T01:08:13","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21639-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["21639-17084"],"Type":3}],"Title":{"Value":"An XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities."}},{"Acknowledgments":[],"CVE":"CVE-2022-48566","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21639-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-362","Value":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"77","ProductStatuses":[{"ProductID":["21639-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["21639-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21639-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-10-21T01:08:22","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21639-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21639-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in compare_digest in Lib/hmac.py in Python through 3.9.1. Constant-time-defeating optimisations were possible in the accumulator variable in hmac.compare_digest."}},{"Acknowledgments":[],"CVE":"CVE-2023-39663","CVSSScoreSets":[],"CWE":[{"ID":"CWE-1333","Value":"Inefficient Regular Expression Complexity"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"78","ProductStatuses":[],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-10-20T22:17:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[],"Title":{"Value":"Mathjax up to v2.7.9 was discovered to contain two Regular expression Denial of Service (ReDoS) vulnerabilities in MathJax.js via the components pattern and markdownPattern. NOTE: the vendor disputes this because the regular expressions are not applied to user input; thus, there is no risk."}},{"Acknowledgments":[],"CVE":"CVE-2023-41361","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20139-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"79","ProductStatuses":[{"ProductID":["20139-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"9.1-2","ProductID":["20139-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20139-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:15:15","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20139-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["20139-17084"],"Type":3}],"Title":{"Value":"An issue was discovered in FRRouting FRR 9.0. bgpd/bgp_open.c does not check for an overly large length of the rcv software version."}},{"Acknowledgments":[],"CVE":"CVE-2022-34038","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18252-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19729-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19942-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"80","ProductStatuses":[{"ProductID":["18252-17084","19729-17084","19942-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.29.1-2","ProductID":["18252-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18252-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.5.12-1","ProductID":["19942-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19942-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:08:35","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2023-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18252-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19729-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19942-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18252-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19729-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19942-17084"],"Type":3}],"Title":{"Value":"Etcd v3.5.4 allows remote attackers to cause a denial of service via function PageWriter.write in pagewriter.go. NOTE: the vendor's position is that this is not a vulnerability."}},{"Acknowledgments":[],"CVE":"CVE-2020-18780","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17667-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"81","ProductStatuses":[{"ProductID":["19668-17086","17667-17084","19668-21692"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T23:30:10","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T15:19:29","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-12T21:12:04","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17667-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17667-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-21692"],"Type":3}],"Title":{"Value":"A Use After Free vulnerability in function new_Token in asm/preproc.c in nasm 2.14.02 allows attackers to cause a denial of service via crafted nasm command."}},{"Acknowledgments":[],"CVE":"CVE-2020-21528","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17667-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"82","ProductStatuses":[{"ProductID":["17667-17084","19668-21692","19668-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-04T05:21:51","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T03:12:14","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-12T21:47:37","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17667-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17667-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-21692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-17086"],"Type":3}],"Title":{"Value":"A Segmentation Fault issue discovered in in ieee_segment function in outieee.c in nasm 2.14.03 and 2.15 allows remote attackers to cause a denial of service via crafted assembly file."}},{"Acknowledgments":[],"CVE":"CVE-2020-21687","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17667-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"83","ProductStatuses":[{"ProductID":["17667-17084","19668-17086","19668-21692"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-08-12T22:40:14","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2025-09-03T20:48:25","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T15:11:11","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17667-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17667-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-21692"],"Type":3}],"Title":{"Value":"Buffer Overflow vulnerability in scan function in stdscan.c in nasm 2.15rc0 allows remote attackers to cause a denial of service via crafted asm file."}},{"Acknowledgments":[],"CVE":"CVE-2023-39615","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19447-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-119","Value":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"84","ProductStatuses":[{"ProductID":["19447-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-08-07T00:16:19","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19447-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19447-17084"],"Type":3}],"Title":{"Value":"Xmlsoft Libxml2 v2.11.0 was discovered to contain an out-of-bounds read via the xmlSAX2StartElement() function at /libxml2/SAX2.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. NOTE: the vendor's position is that the product does not support the legacy SAX1 interface with custom callbacks; there is a crash even without crafted input."}},{"Acknowledgments":[],"CVE":"CVE-2023-4133","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19919"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19919-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"85","ProductStatuses":[{"ProductID":["19919","19919-21692"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2024-05-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-08-07T00:57:56","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-08-12T21:24:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19919"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19919-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19919"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19919-21692"],"Type":3}],"Title":{"Value":"Kernel: cxgb4: use-after-free in ch_flower_stats_cb()"}},{"Acknowledgments":[],"CVE":"CVE-2022-29654","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17667-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"86","ProductStatuses":[{"ProductID":["19668-21692","17667-17084","19668-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T20:04:10","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:16:13","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-12T21:36:09","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17667-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-21692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17667-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-17086"],"Type":3}],"Title":{"Value":"Buffer overflow vulnerability in quote_for_pmake in asm/nasm.c in nasm before 2.15.05 allows attackers to cause a denial of service via crafted file."}},{"Acknowledgments":[],"CVE":"CVE-2023-38665","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17667-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21097-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19796-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19668-21692"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"87","ProductStatuses":[{"ProductID":["17667-17084","21097-17084","19796-17084","19668-17086","19668-21692"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-03-31T14:38:04","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-08-12T21:12:08","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2025-09-03T19:46:09","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:10:01","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17667-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21097-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19796-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19668-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17667-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21097-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19796-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19668-21692"],"Type":3}],"Title":{"Value":"Null pointer dereference in ieee_write_file in nasm 2.16rc0 allows attackers to cause a denial of service (crash)."}},{"Acknowledgments":[],"CVE":"CVE-2023-4051","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"88","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-02-18T15:03:36","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-09-03T19:55:46","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"Full screen notification obscured by file open dialog"}},{"Acknowledgments":[],"CVE":"CVE-2023-4058","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"89","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T19:55:33","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:13:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116."}},{"Acknowledgments":[],"CVE":"CVE-2022-46884","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"90","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T23:00:19","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T15:18:35","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash.\n*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106."}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-36787","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is higher than normal?</strong></p>\n<p><a href=\"https://www.microsoft.com/en-us/msrc/bounty-new-edge\">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity, specifically it says, &quot;If a bug requires more than a click, a key press, or several preconditions, the severity will be downgraded&quot;. The CVSS scoring system doesn't allow for this type of nuance.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could allow the attacker to gain the privileges needed to perform code execution.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"91","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-4427","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.62</td>\n<td>8/25/2023</td>\n<td>116.0.5845.110/.111</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"92","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.62","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4427: Out of bounds memory access in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-4428","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.62</td>\n<td>8/25/2023</td>\n<td>116.0.5845.110/.111</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"93","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.62","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:40","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4428: Out of bounds memory access in CSS"}},{"Acknowledgments":[],"CVE":"CVE-2023-4431","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.62</td>\n<td>8/25/2023</td>\n<td>116.0.5845.110/.111</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"94","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.62","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4431: Out of bounds memory access in Fonts"}},{"Acknowledgments":[],"CVE":"CVE-2023-4430","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.62</td>\n<td>8/25/2023</td>\n<td>116.0.5845.110/.111</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"95","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.62","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:46","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4430: Use after free in Vulkan"}},{"Acknowledgments":[],"CVE":"CVE-2023-4429","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.62</td>\n<td>8/25/2023</td>\n<td>116.0.5845.110/.111</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"96","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.62","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4429: Use after free in Loader"}},{"Acknowledgments":[{"Name":[{"Value":"Steve Walker with <a href=\"https://www.wcribma.org/\">WCRIBMA</a>"}],"URL":[""]}],"CVE":"CVE-2023-21709","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12038"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12039"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12191"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-307","Value":"Improper Restriction of Excessive Authentication Attempts"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>The attacker would be able to login as another user successfully.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>In a network-based attack, an attacker could brute force user account passwords to log in as that user. Microsoft encourages the use of strong passwords that are more difficult for an attacker to brute force.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is the severity for this CVE rated as Important, but the CVSS score is 9.8?</strong></p>\n<p>The Microsoft proprietary severity rating does not align with the CVSS scoring system. In this case, the severity rating of Important (rather than Critical) reflects the fact that brute-force attacks are unlikely to succeed against users with strong passwords. The CVSS scoring system doesn't allow for this type of nuance.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<h2 id=\"update-october-10-10-2023\">Update October 10-10-2023</h2>\n<p><strong>Is there new information available regarding this CVE?</strong></p>\n<p>Yes, CVE-2023-36434 which was published October 10, 2023 addresses a vulnerability in Windows IIS that completely mitigates this Exchange vulnerability. If you have applied the additional steps documented in the following FAQ, please read the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/released-october-2023-exchange-server-security-updates/ba-p/3950647\">Exchange Blog</a> for details on what to do now regarding this vulnerability as well as what to do for the new Windows IIS vulnerability.</p>\n<p><strong>Are there additional steps needed to protect against this vulnerability?</strong></p>\n<p>Yes, in addition to installing the updates a script must be run. Alternatively you can accomplish the same by running commands from the command line in a PowerShell window or some other terminal.</p>\n<p>Follow the following steps:</p>\n<ol>\n<li>(Strongly recommended) Install Exchange Server 2016 or 2019 August SU (or later)</li>\n<li>Do one of the following:</li>\n</ol>\n<ul>\n<li>Apply the solution for the CVE automatically on your servers, run the CVE-2023-21709.ps1 script. You can find the script and the documentation here: <a href=\"https://aka.ms/CVE-2023-21709ScriptDoc\">https://aka.ms/CVE-2023-21709ScriptDoc</a>.</li>\n</ul>\n<p><strong>or</strong></p>\n<ul>\n<li>Apply the solution for the CVE manually on each server, by running the following command from an elevated PowerShell window:</li>\n</ul>\n<p><code>Clear-WebConfiguration -Filter &quot;/system.webServer/globalModules/add[@name='TokenCacheModule']&quot; -PSPath &quot;IIS:\\&quot;</code></p>\n<ol>\n<li>To roll-back the solution for the CVE manually on each server, run the following:</li>\n</ol>\n<p><code>New-WebGlobalModule -Name &quot;TokenCacheModule&quot; -Image &quot;%windir%\\System32\\inetsrv\\cachtokn.dll&quot;</code></p>\n<p>Although Microsoft recommends installing the security updates as soon as possible, running the script or the commands on a supported version of Exchange Server prior to installing the updates will address this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there anything that I should be aware of if I'm running a non-English operating system and version of Exchange server?</strong></p>\n<p>Yes, an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates. The script protecting customers from the vulnerability documented by <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709\">CVE-2023-21709</a> can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script.</p>\n<p>August 15, 2023 Update: The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n<p>Please see the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025\">Exchange Blog</a> for more information.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"97","ProductStatuses":[{"ProductID":["12038","12039","12191"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1118.037","ProductID":["12038"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5ffd5bed-1305-4505-b21a-caf4913d03da"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12038"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.01.2507.032","ProductID":["12039"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5025903","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=026d6264-dc26-4482-aad7-c7f8e250e872"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12039"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1258.025","ProductID":["12191"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=593a50a5-595a-43b4-a258-2c97a910b87f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12191"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"}],"RevisionHistory":[{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added FAQ regarding a new known issue in the August Exchange security updates.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n"},"Number":"2.0"},{"Date":"2023-08-17T00:00:00","Description":{"Value":"<p>Corrected security updates table. This is an informational change only.</p>\n"},"Number":"2.1"},{"Date":"2023-10-10T00:00:00","Description":{"Value":"<p>Added FAQ information. This is an informational change only.</p>\n"},"Number":"2.2"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12038"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12039"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12191"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12038"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12039"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12191"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Exchange Server Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Daniel F."}],"URL":[""]}],"CVE":"CVE-2023-35368","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12191"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12039"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12038"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there anything that I should be aware of if I'm running a non-English operating system and version of Exchange server?</strong></p>\n<p>Yes, an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates. The script protecting customers from the vulnerability documented by <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709\">CVE-2023-21709</a> can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script.</p>\n<p>August 15, 2023 Update: The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n<p>Please see the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025\">Exchange Blog</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A), and privilege required is none (PR:N). What does that mean for this vulnerability?</strong></p>\n<p>The attacker for this vulnerability could target the server accounts in an arbitrary or remote code execution and attempt to trigger malicious code in the context of the server's account through a network call. The attacker needs no privileges to perform this attack.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H) and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could access a user's Net-NTLMv2 hash which could be used as a basis of an NTLM Relay attack against another service to authenticate as the user.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"98","ProductStatuses":[{"ProductID":["12191","12039","12038"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1258.025","ProductID":["12191"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=593a50a5-595a-43b4-a258-2c97a910b87f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12191"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.01.2507.032","ProductID":["12039"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5025903","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=026d6264-dc26-4482-aad7-c7f8e250e872"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12039"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1118.037","ProductID":["12038"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5ffd5bed-1305-4505-b21a-caf4913d03da"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12038"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added FAQ regarding a new known issue in the August Exchange security updates.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12191"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12039"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12038"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12191"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12039"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12038"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Exchange Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"James Forshaw with Google Project Zero"}],"URL":[""]},{"Name":[{"Value":"Le Qi Chen working with Trend Micro Zero Day Initiative"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/karol-mazurek-849975183/\">Karmaz</a> with <a href=\"https://afine.pl/\">AFINE</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/securiteam_ssd\">Anonymous</a> with <a href=\"https://ssd-disclosure.com/\">SSD Secure Disclosure</a>"}],"URL":[""]}],"CVE":"CVE-2023-35359","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-23","Value":"Relative Path Traversal"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, the attack vector is local (AV:L) and privilege required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>An attacker must have local access to the targeted machine and must be able to create folders and performance traces on the machine, with restricted privileges that normal users have by default.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"99","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-14T00:00:00","Description":{"Value":"<p>Acknowledgement added. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2023-08-24T00:00:00","Description":{"Value":"<p>Added acknowledgements. This is an informational change only.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.notion.so/dong-uk-kim-91de2ceb59c44c6ea7533b0e8b2e35af\">Kim Dong-Uk (@justlikebono)</a>"}],"URL":[""]}],"CVE":"CVE-2023-36865","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the targeted environment.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Visio","Type":7,"Value":"Microsoft Office Visio"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"100","ProductStatuses":[{"ProductID":["11573","11574","11952","11762","11763","11953"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11952","11762","11763","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11952","11762","11763","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Office Visio Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.notion.so/dong-uk-kim-91de2ceb59c44c6ea7533b0e8b2e35af\">Kim Dong-Uk (@justlikebono)</a>"}],"URL":[""]}],"CVE":"CVE-2023-36866","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10744"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10743"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the targeted environment.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Visio","Type":7,"Value":"Microsoft Office Visio"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"101","ProductStatuses":[{"ProductID":["11953","11763","11574","11573","11762","11952","10744","10743"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11953","11763","11574","11573","11762","11952"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11953","11763","11574","11573","11762","11952"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002565"},"FixedBuild":"5439.1000","ProductID":["10744","10743"],"RestartRequired":{"Value":"Maybe"},"SubType":"Other","Supercedence":"5002491","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10744","10743"],"SubType":"5002565","Type":3,"URL":"https://support.microsoft.com/help/5002565"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-03-12T00:00:00","Description":{"Value":"<p>In the Security Updates table added Microsoft Visio 2016 (32-bit edition) and Microsoft Visio 2016 (64-bit edition) as these versions of Visio are also affected by the vulnerability. Microsoft strongly recommends that customers running any of these versions of Visio install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10744"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10743"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10744"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10743"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Office Visio Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Bill Demirkapi with Microsoft"}],"URL":[""]}],"CVE":"CVE-2023-36873","CVSSScoreSets":[{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10852"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10853"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10816"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10855"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10051"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10049"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10378"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10379"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10483"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10543"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11568"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11569"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11571"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11572"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11923"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11924"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11926"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11927"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11929"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11930"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11931"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-12097"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-12098"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-12099"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11568"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11569"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11570"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11571"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11572"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10051"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10049"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10378"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10379"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10483"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10543"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11923"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11924"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11926"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11927"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11929"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11930"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11931"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12085"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12086"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12097"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12098"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12099"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-9312"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-10287"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-9318"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":7.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-9344"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<div data-wrapper=\"true\" style=\"font-family:'Segoe UI','Helvetica Neue',sans-serif; font-size:9pt\">\n<div>faq</div>\n</div>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<div data-wrapper=\"true\" style=\"font-family:'Segoe UI','Helvetica Neue',sans-serif; font-size:9pt\">\n<div><span style=\"font-family:Arial,Helvetica,sans-serif\">arial</span></div>\n</div>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to create a crafted certificate in order to validate themselves as a trusted source.</p>\n"},{"Ordinal":"20","Title":".NET Framework","Type":7,"Value":".NET Framework"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"102","ProductStatuses":[{"ProductID":["11650-10852","11650-10853","11650-10816","11650-10855","11650-10051","11650-10049","11650-10378","11650-10379","11650-10483","11650-10543","11676-11568","11676-11569","11676-11571","11676-11572","11676-11923","11676-11924","11676-11926","11676-11927","11676-11929","11676-11930","11676-11931","11676-12097","11676-12098","11676-12099","11677-11568","11677-11569","11677-11570","11677-11571","11677-11572","11723-10852","11723-10853","11723-10816","11723-10855","11863-10051","11863-10049","11863-10378","11863-10379","11863-10483","11863-10543","12079-11923","12079-11924","12079-11926","12079-11927","12079-11929","12079-11930","12079-11931","12079-12085","12079-12086","12079-12097","12079-12098","12079-12099","12115-9312","12115-10287","12115-9318","12115-9344","12128-10729","12128-10735"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5028952"},"FixedBuild":"4.8.4654.06","ProductID":["11650-10852"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10852"],"SubType":"5028952","Type":3,"URL":"https://support.microsoft.com/help/5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5028952"},"FixedBuild":"4.8.04654.06","ProductID":["11650-10853","11650-10816","11650-10855"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10853","11650-10816","11650-10855"],"SubType":"5028952","Type":3,"URL":"https://support.microsoft.com/help/5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029651"},"FixedBuild":"4.8.4654.06","ProductID":["11650-10051","11650-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028958"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10051","11650-10049"],"SubType":"5029651","Type":3,"URL":"https://support.microsoft.com/help/5029651"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029566"},"FixedBuild":"4.8.04654.05","ProductID":["11650-10051","11650-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028975"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10051","11650-10049"],"SubType":"5029566","Type":3,"URL":"https://support.microsoft.com/help/5029566"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029652"},"FixedBuild":"4.8.04654.06","ProductID":["11650-10378","11650-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028955"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10378","11650-10379"],"SubType":"5029652","Type":3,"URL":"https://support.microsoft.com/help/5029652"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029567"},"FixedBuild":"4.8.04654.05","ProductID":["11650-10378","11650-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028973"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10378","11650-10379"],"SubType":"5029567","Type":3,"URL":"https://support.microsoft.com/help/5029567"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029653"},"FixedBuild":"4.8.04654.08","ProductID":["11650-10483","11650-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028957"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10483","11650-10543"],"SubType":"5029653","Type":3,"URL":"https://support.microsoft.com/help/5029653"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029568"},"FixedBuild":"4.8.04654.07","ProductID":["11650-10483","11650-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028974"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10483","11650-10543"],"SubType":"5029568","Type":3,"URL":"https://support.microsoft.com/help/5029568"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"3.5.4654.08","ProductID":["11676-11568"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028953"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11568"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"4.8.04654.08","ProductID":["11676-11569","11676-11571","11676-11572"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028953"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11569","11676-11571","11676-11572"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029655"},"FixedBuild":"4.8.04654.06","ProductID":["11676-11923","11676-11924"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028956"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11923","11676-11924"],"SubType":"5029655","Type":3,"URL":"https://support.microsoft.com/help/5029655"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029650"},"FixedBuild":"4.8.04654.06","ProductID":["11676-11926","11676-11927"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028954"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11926","11676-11927"],"SubType":"5029650","Type":3,"URL":"https://support.microsoft.com/help/5029650"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029648"},"FixedBuild":"4.8.04654.06","ProductID":["11676-11929","11676-11930","11676-11931"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028951"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11929","11676-11930","11676-11931"],"SubType":"5029648","Type":3,"URL":"https://support.microsoft.com/help/5029648"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029649"},"FixedBuild":"4.8.04654.06","ProductID":["11676-12097","11676-12098","11676-12099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028951"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-12097","11676-12098","11676-12099"],"SubType":"5029649","Type":3,"URL":"https://support.microsoft.com/help/5029649"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"3.5.04057.05","ProductID":["11677-11568","11677-11569","11677-11571","11677-11572"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028960"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11677-11568","11677-11569","11677-11571","11677-11572"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"4.7.4057.05","ProductID":["11677-11570"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028960"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11677-11570"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["11723-10852","11723-10853","11723-10816","11723-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11723-10852","11723-10853","11723-10816","11723-10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029651"},"FixedBuild":"4.7.04057.05","ProductID":["11863-10051","11863-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028963"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10051","11863-10049"],"SubType":"5029651","Type":3,"URL":"https://support.microsoft.com/help/5029651"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029566"},"FixedBuild":"4.7.4057.04","ProductID":["11863-10051","11863-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10051","11863-10049"],"SubType":"5029566","Type":3,"URL":"https://support.microsoft.com/help/5029566"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029652"},"FixedBuild":"4.7.04057.05","ProductID":["11863-10378","11863-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028961"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10378","11863-10379"],"SubType":"5029652","Type":3,"URL":"https://support.microsoft.com/help/5029652"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029567"},"FixedBuild":"4.7.04057.04","ProductID":["11863-10378","11863-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028976"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10378","11863-10379"],"SubType":"5029567","Type":3,"URL":"https://support.microsoft.com/help/5029567"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029653"},"FixedBuild":"4.7.04057.07","ProductID":["11863-10483","11863-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028962"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10483","11863-10543"],"SubType":"5029653","Type":3,"URL":"https://support.microsoft.com/help/5029653"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029568"},"FixedBuild":"4.7.04057.06","ProductID":["11863-10483","11863-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028977"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10483","11863-10543"],"SubType":"5029568","Type":3,"URL":"https://support.microsoft.com/help/5029568"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029655"},"FixedBuild":"3.5.09176.01","ProductID":["12079-11923","12079-11924"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028950"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-11923","12079-11924"],"SubType":"5029655","Type":3,"URL":"https://support.microsoft.com/help/5029655"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029650"},"FixedBuild":"4.8.09176.01","ProductID":["12079-11926","12079-11927"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028947"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-11926","12079-11927"],"SubType":"5029650","Type":3,"URL":"https://support.microsoft.com/help/5029650"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029648"},"FixedBuild":"4.8.09176.01","ProductID":["12079-11929","12079-11930","12079-11931"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028946"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-11929","12079-11930","12079-11931"],"SubType":"5029648","Type":3,"URL":"https://support.microsoft.com/help/5029648"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5028948"},"FixedBuild":"4.8.09176.01","ProductID":["12079-12085","12079-12086"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028948"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-12085","12079-12086"],"SubType":"5028948","Type":3,"URL":"https://support.microsoft.com/help/5028948"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029649"},"FixedBuild":"4.8.09176.01","ProductID":["12079-12097","12079-12098","12079-12099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028946"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-12097","12079-12098","12079-12099"],"SubType":"5029649","Type":3,"URL":"https://support.microsoft.com/help/5029649"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029654"},"FixedBuild":"4.7.04057.05","ProductID":["12115-9312","12115-10287","12115-9318","12115-9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028963"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12115-9312","12115-10287","12115-9318","12115-9344"],"SubType":"5029654","Type":3,"URL":"https://support.microsoft.com/help/5029654"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029569"},"FixedBuild":"4.7.4057.04","ProductID":["12115-9312","12115-10287"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12115-9312","12115-10287"],"SubType":"5029569","Type":3,"URL":"https://support.microsoft.com/help/5029569"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029569"},"FixedBuild":"4.7.04057.04","ProductID":["12115-9318","12115-9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12115-9318","12115-9344"],"SubType":"5029569","Type":3,"URL":"https://support.microsoft.com/help/5029569"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["12128-10729","12128-10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12128-10729","12128-10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-24T00:00:00","Description":{"Value":"<p>In the Security Updates table, added .NET Framework 3.5 and 4.6.2 installed on Windows 10 for 32-bit systems and Windows 10 for x64-based systems; added .NET Framework 3.5 and 4.6.2/4.7./4.7.1/4.7.2 installed on all supported editions of Windows 10 version 1607 and Windows Server 2016 as these versions of .NET Framework are affected by this vulnerability. Microsoft recommends that customers install the August 2023 updates to be fully protected from this vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11650-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11676-12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11677-11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11677-11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11677-11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11677-11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11677-11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11723-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11723-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11723-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11723-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11863-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11863-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11863-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11863-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11863-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11863-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12079-12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12115-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12115-10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12115-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12115-9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12128-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12128-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12128-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12128-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":".NET Framework Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"OUYANG FEI"}],"URL":[""]}],"CVE":"CVE-2023-36876","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.2,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.2,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could create or delete files in the security context of the “NT AUTHORITY\\ LOCAL SERVICE” account.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability does not impact confidentiality (C:N) but has major impact on integrity (I:H) and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability cannot access existing files (C:N) but can write or overwrite file contents (I:H), which potentially may cause the system to become unavailable (A:H).</p>\n"},{"Ordinal":"20","Title":"Reliability Analysis Metrics Calculation Engine","Type":7,"Value":"Reliability Analysis Metrics Calculation Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"103","ProductStatuses":[{"ProductID":["10051","10049"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-09-18T00:00:00","Description":{"Value":"<p>Acknowledgement added. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"bee13oy with <a href=\"https://www.cyberkl.com/\">Cyber Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-36882","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker could exploit the vulnerability by tricking an authenticated user (CVSS metric UI:R) into attempting to connect to a malicious SQL server via a connection driver (for example: ODBC and / or OLEDB as applicable).</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p>\n<p>An authenticated victim who is connected to the network must be tricked or persuaded to connect to a malicious SQL database using their SQL client application. After the connection is made, the server can send specially crafted replies to the client that exploit the vulnerability and permit execution of arbitrary code within the context of the user's SQL client application.</p>\n"},{"Ordinal":"20","Title":"Microsoft WDAC OLE DB provider for SQL","Type":7,"Value":"Microsoft WDAC OLE DB provider for SQL"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"104","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p><strong>The following <a href=\"https://technet.microsoft.com/library/security/dn848375.aspx\">mitigating factors</a> might be helpful in your situation:</strong></p>\n<p>Exploitation of this vulnerability requires an attacker to trick or convince the victim into connecting to their malicious server. If your environment only connects to known, trusted servers and there is no ability to reconfigure existing connections to point to another location (for example you use TLS encryption with certificate validation), the vulnerability cannot be exploited.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Alexander Kirk with Viasat"}],"URL":[""]}],"CVE":"CVE-2023-36889","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-284","Value":"Improper Access Control"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>\n<p>An authenticated attacker who successfully exploited this vulnerability could read specific Group Policy configuration settings.</p>\n"},{"Ordinal":"20","Title":"Windows Group Policy","Type":7,"Value":"Windows Group Policy"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"105","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Group Policy Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"CHEN QINGYANG with Topsec Alpha Team"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/buffaloverflow\">Rich Warren</a> with NCC Group FSAS"}],"URL":[""]},{"Name":[{"Value":"wh1tc & Zhiniang Peng with Sangfor"}],"URL":[""]}],"CVE":"CVE-2023-36898","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-426","Value":"Untrusted Search Path"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"20","Title":"Tablet Windows User Interface","Type":7,"Value":"Tablet Windows User Interface"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"106","ProductStatuses":[{"ProductID":["11926","11927","12085","12086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-09-18T00:00:00","Description":{"Value":"<p>Added acknowledgements. This is an informational change only.</p>\n"},"Number":"1.2"},{"Date":"2023-08-23T00:00:00","Description":{"Value":"<p>Acknowledgement added. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Tablet Windows User Interface Application Core Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/irsdl\">Soroush Dalili</a>"}],"URL":[""]}],"CVE":"CVE-2023-36899","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10051"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10049"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10378"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10379"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10543"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10483"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11929"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11931"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11930"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-12097"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-12098"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-12099"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11723-10853"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11723-10852"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11723-10816"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10378"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10049"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10051"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10379"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10483"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11929"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11926"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11927"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12086"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12085"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11931"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11930"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10853"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10852"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10816"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11650-10855"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11569"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11568"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11924"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11572"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11923"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11571"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11570"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11926"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11676-11927"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11570"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11568"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11569"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11571"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11677-11572"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11723-10855"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11863-10543"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11923"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-11924"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12097"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-9312"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12098"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-9318"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12079-12099"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-10287"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12128-10735"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12128-10729"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12115-9344"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9292-9318"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9292-9312"],"TemporalScore":7.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>The attacker would gain the rights of the user that is running the affected application.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>The target environment could be accidentally configured to allow the vulnerability.</p>\n"},{"Ordinal":"20","Title":"ASP.NET Core","Type":7,"Value":"ASP.NET Core"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"107","ProductStatuses":[{"ProductID":["11650-10051","11650-10049","11650-10378","11650-10379","11650-10543","11650-10483","11676-11929","11676-11931","11676-11930","11676-12097","11676-12098","11676-12099","11723-10853","11723-10852","11723-10816","11863-10378","11863-10049","11863-10051","11863-10379","11863-10483","12079-11929","12079-11926","12079-11927","12079-12086","12079-12085","12079-11931","12079-11930","11650-10853","11650-10852","11650-10816","11650-10855","11676-11569","11676-11568","11676-11924","11676-11572","11676-11923","11676-11571","11676-11570","11676-11926","11676-11927","11677-11570","11677-11568","11677-11569","11677-11571","11677-11572","11723-10855","11863-10543","12079-11923","12079-11924","12079-12097","12115-9312","12079-12098","12115-9318","12079-12099","12115-10287","12128-10735","12128-10729","12115-9344","9292-9318","9292-9312"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029651"},"FixedBuild":"4.8.4654.06","ProductID":["11650-10051","11650-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028958"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10051","11650-10049"],"SubType":"5029651","Type":3,"URL":"https://support.microsoft.com/help/5029651"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029566"},"FixedBuild":"4.8.04654.05","ProductID":["11650-10051","11650-10049"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028975"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10051","11650-10049"],"SubType":"5029566","Type":3,"URL":"https://support.microsoft.com/help/5029566"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029652"},"FixedBuild":"4.8.04654.06","ProductID":["11650-10378","11650-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028955"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10378","11650-10379"],"SubType":"5029652","Type":3,"URL":"https://support.microsoft.com/help/5029652"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029567"},"FixedBuild":"4.8.04654.05","ProductID":["11650-10378","11650-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028973"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10378","11650-10379"],"SubType":"5029567","Type":3,"URL":"https://support.microsoft.com/help/5029567"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029653"},"FixedBuild":"4.8.04654.08","ProductID":["11650-10543","11650-10483"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028957"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10543","11650-10483"],"SubType":"5029653","Type":3,"URL":"https://support.microsoft.com/help/5029653"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029568"},"FixedBuild":"4.8.04654.07","ProductID":["11650-10543","11650-10483"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028974"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10543","11650-10483"],"SubType":"5029568","Type":3,"URL":"https://support.microsoft.com/help/5029568"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029648"},"FixedBuild":"4.8.04654.06","ProductID":["11676-11929","11676-11931","11676-11930"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028951"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11929","11676-11931","11676-11930"],"SubType":"5029648","Type":3,"URL":"https://support.microsoft.com/help/5029648"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029649"},"FixedBuild":"4.8.04654.06","ProductID":["11676-12097","11676-12098","11676-12099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028951"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-12097","11676-12098","11676-12099"],"SubType":"5029649","Type":3,"URL":"https://support.microsoft.com/help/5029649"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["11723-10853","11723-10852","11723-10816","11723-10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11723-10853","11723-10852","11723-10816","11723-10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029652"},"FixedBuild":"4.7.04057.05","ProductID":["11863-10378","11863-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028961"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10378","11863-10379"],"SubType":"5029652","Type":3,"URL":"https://support.microsoft.com/help/5029652"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029567"},"FixedBuild":"4.7.04057.04","ProductID":["11863-10378","11863-10379"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028976"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10378","11863-10379"],"SubType":"5029567","Type":3,"URL":"https://support.microsoft.com/help/5029567"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029651"},"FixedBuild":"4.7.04057.05","ProductID":["11863-10049","11863-10051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028963"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10049","11863-10051"],"SubType":"5029651","Type":3,"URL":"https://support.microsoft.com/help/5029651"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029566"},"FixedBuild":"4.7.4057.04","ProductID":["11863-10049","11863-10051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10049","11863-10051"],"SubType":"5029566","Type":3,"URL":"https://support.microsoft.com/help/5029566"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029653"},"FixedBuild":"4.7.04057.07","ProductID":["11863-10483","11863-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028962"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10483","11863-10543"],"SubType":"5029653","Type":3,"URL":"https://support.microsoft.com/help/5029653"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029568"},"FixedBuild":"4.7.04057.06","ProductID":["11863-10483","11863-10543"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028977"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11863-10483","11863-10543"],"SubType":"5029568","Type":3,"URL":"https://support.microsoft.com/help/5029568"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029648"},"FixedBuild":"4.8.09176.01","ProductID":["12079-11929","12079-11931","12079-11930"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028946"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-11929","12079-11931","12079-11930"],"SubType":"5029648","Type":3,"URL":"https://support.microsoft.com/help/5029648"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029650"},"FixedBuild":"4.8.09176.01","ProductID":["12079-11926","12079-11927"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028947"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-11926","12079-11927"],"SubType":"5029650","Type":3,"URL":"https://support.microsoft.com/help/5029650"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5028948"},"FixedBuild":"4.8.09176.01","ProductID":["12079-12086","12079-12085"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028948"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-12086","12079-12085"],"SubType":"5028948","Type":3,"URL":"https://support.microsoft.com/help/5028948"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5028952"},"FixedBuild":"4.8.04654.06","ProductID":["11650-10853","11650-10816","11650-10855"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10853","11650-10816","11650-10855"],"SubType":"5028952","Type":3,"URL":"https://support.microsoft.com/help/5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5028952"},"FixedBuild":"4.8.4654.06","ProductID":["11650-10852"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11650-10852"],"SubType":"5028952","Type":3,"URL":"https://support.microsoft.com/help/5028952"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"4.8.04654.08","ProductID":["11676-11569","11676-11572","11676-11571","11676-11570"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028953"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11569","11676-11572","11676-11571","11676-11570"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"3.5.4654.08","ProductID":["11676-11568"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028953"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11568"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029655"},"FixedBuild":"4.8.04654.06","ProductID":["11676-11924","11676-11923"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028956"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11924","11676-11923"],"SubType":"5029655","Type":3,"URL":"https://support.microsoft.com/help/5029655"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029650"},"FixedBuild":"4.8.04654.06","ProductID":["11676-11926","11676-11927"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028954"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11676-11926","11676-11927"],"SubType":"5029650","Type":3,"URL":"https://support.microsoft.com/help/5029650"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"4.7.4057.05","ProductID":["11677-11570"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028960"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11677-11570"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029647"},"FixedBuild":"3.5.04057.05","ProductID":["11677-11568","11677-11569","11677-11571","11677-11572"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028960"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11677-11568","11677-11569","11677-11571","11677-11572"],"SubType":"5029647","Type":3,"URL":"https://support.microsoft.com/help/5029647"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029655"},"FixedBuild":"3.5.09176.01","ProductID":["12079-11923","12079-11924"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028950"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-11923","12079-11924"],"SubType":"5029655","Type":3,"URL":"https://support.microsoft.com/help/5029655"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029649"},"FixedBuild":"4.8.09176.01","ProductID":["12079-12097","12079-12098","12079-12099"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028946"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12079-12097","12079-12098","12079-12099"],"SubType":"5029649","Type":3,"URL":"https://support.microsoft.com/help/5029649"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029654"},"FixedBuild":"4.7.04057.05","ProductID":["12115-9312","12115-9318","12115-10287","12115-9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028963"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12115-9312","12115-9318","12115-10287","12115-9344"],"SubType":"5029654","Type":3,"URL":"https://support.microsoft.com/help/5029654"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029569"},"FixedBuild":"4.7.4057.04","ProductID":["12115-9312","12115-10287"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12115-9312","12115-10287"],"SubType":"5029569","Type":3,"URL":"https://support.microsoft.com/help/5029569"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029569"},"FixedBuild":"4.7.04057.04","ProductID":["12115-9318","12115-9344"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028978"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12115-9318","12115-9344"],"SubType":"5029569","Type":3,"URL":"https://support.microsoft.com/help/5029569"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["12128-10735","12128-10729"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12128-10735","12128-10729"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029654"},"FixedBuild":"2.0.50727.8974","ProductID":["9292-9318","9292-9312"],"RestartRequired":{"Value":"Maybe"},"SubType":"Monthly Rollup","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028968"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9292-9318","9292-9312"],"SubType":"5029654","Type":3,"URL":"https://support.microsoft.com/help/5029654"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029569"},"FixedBuild":"3.0.50727.8974","ProductID":["9292-9318","9292-9312"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5028980"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9292-9318","9292-9312"],"SubType":"5029569","Type":3,"URL":"https://support.microsoft.com/help/5029569"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Updated one or more CVSS scores for the affected products. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2023-10-24T00:00:00","Description":{"Value":"<p>In the Security Updates table, added .NET Framework 3.5 and 4.6.2 installed on Windows 10 for 32-bit systems and Windows 10 for x64-based systems; added .NET Framework 3.5 and 4.6.2/4.7./4.7.1/4.7.2 installed on all supported editions of Windows 10 version 1607 and Windows Server 2016 as these versions of .NET Framework are affected by this vulnerability. Microsoft recommends that customers install the August 2023 updates to be fully protected from this vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p>\n"},"Number":"2.0"},{"Date":"2023-10-26T00:00:00","Description":{"Value":"<p>Updated one or more CVSS scores for the affected products. This is an informational change only.</p>\n"},"Number":"2.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11723-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11723-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11723-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11863-10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11863-10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11863-10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11863-10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11863-10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11650-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11676-11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11677-11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11677-11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11677-11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11677-11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11677-11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11723-10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11863-10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12115-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12115-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12079-12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12115-10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12128-10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12128-10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12115-9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9292-9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9292-9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11650-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11676-11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11677-11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11723-10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11863-10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12079-12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12128-10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12128-10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12115-9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9292-9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"ASP.NET Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]},{"Name":[{"Value":"Anonymous working with <a href=\"https://www.zerodayinitiative.com/\">Trend Micro Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"Lê Trần Hải Tùng and Namnp of Viettel Cyber Security"}],"URL":[""]}],"CVE":"CVE-2023-36900","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Common Log File System Driver","Type":7,"Value":"Windows Common Log File System Driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"108","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-11T00:00:00","Description":{"Value":"<p>Updated acknowledgment.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Common Log File System Driver Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/filip_dragovic\">Filip Dragović</a>"}],"URL":[""]}],"CVE":"CVE-2023-36903","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain specific limited SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows System Assessment Tool","Type":7,"Value":"Windows System Assessment Tool"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"109","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows System Assessment Tool Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/ranchoice\">RanchoIce</a>"}],"URL":[""]}],"CVE":"CVE-2023-36904","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-126","Value":"Buffer Over-read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Cloud Files Mini Filter Driver","Type":7,"Value":"Windows Cloud Files Mini Filter Driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"110","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"g0st1"}],"URL":[""]}],"CVE":"CVE-2023-36905","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would first have to gain application level execution rights to the system. An attacker could then run a specially crafted application that could exploit the vulnerability to disclose information (AV:L).</p>\n<p>Alternatively, an attacker could gain access by convincing a local user to open a malicious file. The attacker would have to convince the user to click a link, typically by way of an enticement in an email or instant message, and then convince them to open a specially crafted file.</p>\n"},{"Ordinal":"20","Title":"Windows Wireless Wide Area Network Service","Type":7,"Value":"Windows Wireless Wide Area Network Service"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"111","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Added an FAQ. This is an information change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-36906","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-170","Value":"Improper Null Termination"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>For successful exploitation, a locally authenticated attacker needs to send a specially crafted request to the cryptography provider's vulnerable function.</p>\n"},{"Ordinal":"20","Title":"Windows Cryptographic Services","Type":7,"Value":"Windows Cryptographic Services"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"112","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-11-06T00:00:00","Description":{"Value":"<p>Added an FAQ. This is an information change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Cryptographic Services Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-36907","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-170","Value":"Improper Null Termination"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>For successful exploitation, a locally authenticated attacker needs to send a specially crafted request to the cryptography provider's vulnerable function.</p>\n"},{"Ordinal":"20","Title":"Windows Cryptographic Services","Type":7,"Value":"Windows Cryptographic Services"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"113","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-11-06T00:00:00","Description":{"Value":"<p>Added an FAQ. This is an information change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Cryptographic Services Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"linfeng of HeBei HuaCe"}],"URL":[""]}],"CVE":"CVE-2023-36908","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-200","Value":"Exposure of Sensitive Information to an Unauthorized Actor"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the Hyper-V attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p>\n<p>Where the attack vector metric is Adjacent (A), this represents virtual machines connected via a Hyper-V Network Virtualization (HNV) logical network. This configuration forms an isolation boundary where the virtual machines within the virtual network can only communicate with each other. In this attack vector, the vulnerable component is bound to the network stack, but the attack is limited to systems configured to use the HNV network.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if a Hyper-V Guest attacker successfully exploited this vulnerability is data from the Hyper-V Host.</p>\n"},{"Ordinal":"20","Title":"Role: Windows Hyper-V","Type":7,"Value":"Role: Windows Hyper-V"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"114","ProductStatuses":[{"ProductID":["11569","11571","11572","11923","11924","11926","11927","11931","12085","12086","12097","10735","10853","10816","10855","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11569","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11569","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11569","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11931","12097"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Updated one or more CVSS scores for the affected products. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Hyper-V Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/4zure9\">Azure Yang</a> with <a href=\"http://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-36909","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-191","Value":"Integer Underflow (Wrap or Wraparound)"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to send a specially crafted malicious MSMQ packet to a MSMQ server. The vulnerability is triggered when a user on the target machine accesses message queuing, which could result in a denial of service.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"115","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-36910","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit the vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to send a specially crafted malicious MSMQ packet to a MSMQ server. This could result in remote code execution on the server side.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"116","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:</p>\n<p>The Windows message queuing service, which is a Windows component, needs to be enabled for a system to be exploitable by this vulnerability. This feature can be added via the Control Panel.</p>\n<p>You can check to see if there is a service running named <strong>Message Queuing</strong> and TCP port 1801 is listening on the machine.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-36911","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely execute code on the target server.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"117","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:</p>\n<p>The Windows message queuing service, which is a Windows component, needs to be enabled for a system to be exploitable by this vulnerability. This feature can be added via the Control Panel.</p>\n<p>You can check to see if there is a service running named <strong>Message Queuing</strong> and TCP port 1801 is listening on the machine.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-36912","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"118","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/baixia4\">Jarvis_1oop</a>"}],"URL":[""]}],"CVE":"CVE-2023-36913","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-908","Value":"Use of Uninitialized Resource"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory layout - the vulnerability allows an attacker to collect information that facilitates predicting addressing of the memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"119","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Added an FAQ. This is an information change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Justin Decker"}],"URL":[""]}],"CVE":"CVE-2023-36914","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could bypass the Fast Identity Online (FIDO) secure authentication feature.</p>\n"},{"Ordinal":"20","Title":"Windows Smart Card","Type":7,"Value":"Windows Smart Card"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"120","ProductStatuses":[{"ProductID":["11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/baixia4\">Jarvis_1oop</a>"}],"URL":[""]}],"CVE":"CVE-2023-35376","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to send a specially crafted malicious MSMQ packet to a MSMQ server. The vulnerability is triggered when a user on the target machine accesses message queuing, which could result in a denial of service.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"121","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/baixia4\">Jarvis_1oop</a>"}],"URL":[""]}],"CVE":"CVE-2023-38254","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to send a specially crafted malicious MSMQ packet to a MSMQ server. The vulnerability is triggered when a user on the target machine accesses message queuing, which could result in a denial of service.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"122","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/baixia4\">Jarvis_1oop</a>"}],"URL":[""]}],"CVE":"CVE-2023-35377","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to send a specially crafted malicious MSMQ packet to a MSMQ server. The vulnerability is triggered when a user on the target machine accesses message queuing, which could result in a denial of service.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"123","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/ezrak1e\">ziming zhang</a> with Ant Security Light-Year Lab"}],"URL":[""]}],"CVE":"CVE-2023-35378","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-367","Value":"Time-of-check Time-of-use (TOCTOU) Race Condition"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>Any authenticated user could trigger this vulnerability. It does not require admin or other elevated privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p>\n"},{"Ordinal":"20","Title":"Windows Projected File System","Type":7,"Value":"Windows Projected File System"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"124","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>The following <a href=\"https://technet.microsoft.com/library/security/dn848375.aspx\">mitigating factors</a> might be helpful in your situation:</p>\n<p>Exploitation of this issue requires the optional Projected Filesystem component to be enabled, which is not a default configuration.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Projected File System Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"OUYANG FEI"}],"URL":[""]}],"CVE":"CVE-2023-35379","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain specific limited SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Reliability Analysis Metrics Calculation Engine","Type":7,"Value":"Windows Reliability Analysis Metrics Calculation Engine"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"125","ProductStatuses":[{"ProductID":["10051","10049"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-35380","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, the attack vector is local (AV:L) and privilege required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>An attacker must have local access to the targeted machine and must be able to create folders and performance traces on the machine, with restricted privileges that normal users have by default.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"126","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"TJ with FuzzWorks"}],"URL":[""]}],"CVE":"CVE-2023-35381","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p>\n<ul>\n<li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li>\n<li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li>\n</ul>\n<p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"20","Title":"Windows Fax and Scan Service","Type":7,"Value":"Windows Fax and Scan Service"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"127","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Fax Service Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2023-35382","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, the attack vector is local (AV:L) and privilege required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>An attacker must have local access to the targeted machine and must be able to create folders and performance traces on the machine, with restricted privileges that normal users have by default.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"128","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-35383","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>An attacker who successfully exploited the vulnerability could potentially read User Mode Service Memory.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"129","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:</p>\n<p>The Windows message queuing service, which is a Windows component, needs to be enabled for a system to be exploitable by this vulnerability. This feature can be added via the Control Panel.</p>\n<p>You can check to see if there is a service running named <strong>Message Queuing</strong> and TCP port 1801 is listening on the machine.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Added mitigation. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/nachoskrnl\">Ben Barnea</a> with <a href=\"https://www.akamai.com/\">Akamai Technologies</a>"}],"URL":[""]}],"CVE":"CVE-2023-35384","CVSSScoreSets":[{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"},{"BaseScore":5.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-73","Value":"External Control of File Name or Path"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>\n<p>A security feature bypass vulnerability exists when the MSHTML platform fails to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended.</p>\n<p>To exploit this vulnerability, an attacker could email or otherwise provide a specially crafted URL to a victim and convince them to click on it.</p>\n<p>The security update addresses the vulnerability by correcting security feature behavior to properly map affected URLs to the correct Security Zone.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker must send the user a malicious file and convince them to open it.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L) and some loss of availability (A:L). What does that mean for this vulnerability?</strong></p>\n<p>An attacker can craft a malicious file or send a malicious URL that would evade Security Zone tagging, resulting in a limited loss of integrity and availability of security features utilized by browsers and some custom applications.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>The Security Updates table indicates that this vulnerability affects all supported versions of Microsoft Windows except Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012. Why are IE Cumulative updates listed for Windows Server 2012 R2?</strong></p>\n<p>While Microsoft has announced retirement of the Internet Explorer 11 application on certain platforms and the Microsoft Edge Legacy application is deprecated, the underlying MSHTML, EdgeHTML, and scripting platforms are still supported. The MSHTML platform is used by Internet Explorer mode in Microsoft Edge as well as other applications through WebBrowser control. The EdgeHTML platform is used by WebView and some UWP applications. The scripting platforms are used by MSHTML and EdgeHTML but can also be used by other legacy applications. Updates to address vulnerabilities in the MSHTML platform and scripting engine are included in the IE Cumulative Updates; EdgeHTML and Chakra changes are not applicable to those platforms.</p>\n<p>To stay fully protected, we recommend that customers who install Security Only updates install the IE Cumulative updates for this vulnerability.</p>\n"},{"Ordinal":"20","Title":"Windows HTML Platform","Type":7,"Value":"Windows HTML Platform"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"130","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029243"},"FixedBuild":"10.0.0.0","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"5028167","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029243"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029243","Type":3,"URL":"https://support.microsoft.com/help/5029243"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows HTML Platforms Security Feature Bypass Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-35385","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":8.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability could allow an unauthenticated attacker to remotely execute code on the target server.</p>\n"},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"131","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>Mitigation refers to a setting, common configuration, or general best-practice, existing in a default state, that could reduce the severity of exploitation of a vulnerability. The following mitigating factors might be helpful in your situation:</p>\n<p>The Windows message queuing service, which is a Windows component, needs to be enabled for a system to be exploitable by this vulnerability. This feature can be added via the Control Panel.</p>\n<p>You can check to see if there is a service running named <strong>Message Queuing</strong> and TCP port 1801 is listening on the machine.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2023-35386","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"132","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lucas Leong (@_wmliang_) of <a href=https://www.zerodayinitiative.com/>Trend Micro Zero Day Initiative</a>"}],"URL":[""]}],"CVE":"CVE-2023-35387","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-191","Value":"Integer Underflow (Wrap or Wraparound)"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires that an attacker will need to first gain access to the restricted network before running an attack.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An authorized attacker could exploit the Windows Bluetooth driver vulnerability by programmatically running certain functions that could lead to elevation of privilege on the Bluetooth component.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>In order to exploit this vulnerability, the victim must pair with the attacker's Bluetooth device.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>\n<p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p>\n"},{"Ordinal":"20","Title":"Windows Bluetooth A2DP driver","Type":7,"Value":"Windows Bluetooth A2DP driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"133","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-11T00:00:00","Description":{"Value":"<p>Updated acknowledgment.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Vladimir Egorov"}],"URL":[""]}],"CVE":"CVE-2023-35389","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11664"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-611","Value":"Improper Restriction of XML External Entity Reference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>\n<p>A user could be tricked into entering credentials or responding to a pop up after opening a specially crafted file or clicking on a link, typically by way of an enticement in an email or URL.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>A user would have to open a maliciously crafted email sent to Dynamics 365 Customer Engagement.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to minor loss of confidentiality (C:L), integrity (I:L) and availability (A:L). What does that mean for this vulnerability?</strong></p>\n<p>While we cannot rule out the impact to Confidentiality, Integrity, and Availability, the ability to exploit this vulnerability by itself is limited. An attacker can force a bad response to be cached into a regular URL by having multiple occurrences of the same variable in the query string. The impact depends on the business logic of the user application.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N). What is the target used in the context of the remote code execution?</strong></p>\n<p>As an authenticated user, the attacker could attempt to trigger malicious code in the context of the victim.</p>\n<ul>\n<li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li>\n<li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li>\n</ul>\n<p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N), and privilege required is low (PR:L). What is the target used in the context of the remote code execution?</strong></p>\n<p>The attacker for this vulnerability could target the server accounts in an arbitrary or remote code execution. As an authenticated user, the attacker could attempt to trigger malicious code in the context of the server's account through a network call.</p>\n<p>The privilege requirement is low because the attacker needs to be authenticated as a normal user.</p>\n"},{"Ordinal":"20","Title":"Microsoft Dynamics","Type":7,"Value":"Microsoft Dynamics"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"134","ProductStatuses":[{"ProductID":["11664"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5026500"},"FixedBuild":"9.0.47.08","ProductID":["11664"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/download/details.aspx?id=105283"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11664"],"SubType":"5026500","Type":3,"URL":"https://support.microsoft.com/help/5026500"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-10T00:00:00","Description":{"Value":"<p>In the Security Updates table, removed Microsoft Dynamics 365 (on-premises) version 9.1 as it is not affected by this vulnerability. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11664"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11664"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lidor B. with Orca Security"}],"URL":[""]}],"CVE":"CVE-2023-35393","CVSSScoreSets":[{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11987"],"TemporalScore":3.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker would have to send the victim a malicious file that the victim would have to execute.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p>**According to the CVSS metric, user interaction is required (UI:R) and privileges required is high (PR:H). What does that mean for this vulnerability?</p>\n<p>An authorized attacker with administrator privileges must send a victim a malicious site and convince them to open it.</p>\n"},{"Ordinal":"20","Title":"Azure HDInsights","Type":7,"Value":"Azure HDInsights"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"135","ProductStatuses":[{"ProductID":["11987"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2307201242","ProductID":["11987"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-upgrade-cluster"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11987"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11987"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11987"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure Apache Hive Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lidor B. with Orca Security"}],"URL":[""]}],"CVE":"CVE-2023-35394","CVSSScoreSets":[{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11987"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker would have to send the victim a malicious file that the victim would have to execute.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>An authorized attacker with guest privileges must send a victim a malicious site and convince them to open it.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to minor loss of confidentiality (C:L), integrity (I:L), and availability (A:N). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability has limited impacts to Confidentiality and Integrity and no impact on Availability. An attacker would need to combine this vulnerability with other vulnerabilities to perform an attack.</p>\n"},{"Ordinal":"20","Title":"Azure HDInsights","Type":7,"Value":"Azure HDInsights"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"136","ProductStatuses":[{"ProductID":["11987"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2307201242","ProductID":["11987"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-upgrade-cluster"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11987"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11987"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11987"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure HDInsight Jupyter Notebook Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lidor B. with Orca Security"}],"URL":[""]}],"CVE":"CVE-2023-38188","CVSSScoreSets":[{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11987"],"TemporalScore":3.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker would have to send the victim a malicious file that the victim would have to execute.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p>**According to the CVSS metric, user interaction is required (UI:R) and privileges required is high (PR:H). What does that mean for this vulnerability?</p>\n<p>An authorized attacker with administrator privileges must send a victim a malicious site and convince them to open it.</p>\n"},{"Ordinal":"20","Title":"Azure HDInsights","Type":7,"Value":"Azure HDInsights"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"137","ProductStatuses":[{"ProductID":["11987"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2307201242","ProductID":["11987"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-upgrade-cluster"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11987"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11987"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11987"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure Apache Hadoop Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://github.com/marcosd4h\">Marcos Oviedo</a> with <a href=\"https://fleetdm.com/\">FleetDM</a>"}],"URL":[""]}],"CVE":"CVE-2023-38186","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-306","Value":"Missing Authentication for Critical Function"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Mobile Device Management","Type":7,"Value":"Windows Mobile Device Management"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"138","ProductStatuses":[{"ProductID":["11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Updated one or more CVSS scores for the affected products and added an FAQ explaining the vector string settings. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Mobile Device Management Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://github.com/zcgonvh\">zcgonvh</a>"}],"URL":[""]}],"CVE":"CVE-2023-38185","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12191"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12038"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12039"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-23","Value":"Relative Path Traversal"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is none (UI:N). What is the target used in the context of the remote code execution?</strong></p>\n<p>The attacker for this vulnerability could target the server accounts in an arbitrary or remote code execution. As an authenticated user, the attacker could attempt to trigger malicious code in the context of the server's account through a network call.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). Does the attacker need to be in an authenticated role on the Exchange Server?</strong></p>\n<p>Yes, the attacker must be authenticated.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>In a network-based attack, an attacker could trigger malicious code in the context of the server's account through a network call.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there anything that I should be aware of if I'm running a non-English operating system and version of Exchange server?</strong></p>\n<p>Yes, an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates. The script protecting customers from the vulnerability documented by <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709\">CVE-2023-21709</a> can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script.</p>\n<p>August 15, 2023 Update: The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n<p>Please see the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025\">Exchange Blog</a> for more information.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"139","ProductStatuses":[{"ProductID":["12191","12038","12039"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1258.025","ProductID":["12191"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=593a50a5-595a-43b4-a258-2c97a910b87f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12191"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1118.037","ProductID":["12038"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5ffd5bed-1305-4505-b21a-caf4913d03da"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12038"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.01.2507.032","ProductID":["12039"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5025903","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=026d6264-dc26-4482-aad7-c7f8e250e872"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12039"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added FAQ regarding a new known issue in the August Exchange security updates.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12191"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12038"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12039"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12191"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12038"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12039"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Exchange Server Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Polar Bear"}],"URL":[""]}],"CVE":"CVE-2023-38184","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An authenticated attacker who successfully exploited this vulnerability could gain code execution through a specially crafted LDAP call to execute arbitrary code within the context of the LDAP service.</p>\n"},{"Ordinal":"20","Title":"Windows LDAP - Lightweight Directory Access Protocol","Type":7,"Value":"Windows LDAP - Lightweight Directory Access Protocol"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"140","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{}],"URL":[""]}],"CVE":"CVE-2023-20569","CVSSScoreSets":[],"CWE":[{"ID":"CWE-1037","Value":" Processor Optimization Removal or Modification of Security-critical Code"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this AMD CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protection against the vulnerability.</p>\n<p>Please see the following for more information:</p>\n<ul>\n<li><a href=\"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-7005\">AMD-SB-7005</a></li>\n</ul>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Are any additional steps required to protect my system after installing the August Windows updates?</strong></p>\n<p>Customers who allow untrusted users to execute arbitrary code might wish to implement some extra security features within their systems. These features protect against the intra-process disclosure vectors that this speculative execution vulnerability describes. See the following for more information.</p>\n<ul>\n<li>Microsoft Windows client customers: See <a href=\"https://support.microsoft.com/help/4073119\">Microsoft Knowledge Base Article 4073119</a>.</li>\n<li>Microsoft Windows Server/Azure Stack HCI customers: See <a href=\"https://support.microsoft.com/help/4072698\">Microsoft Knowledge Base Article 4072698</a> for additional information, including workarounds.</li>\n</ul>\n<p>Microsoft Azure has taken steps to address the security vulnerabilities at the hypervisor level to protect VMs running in Azure. More information can be found <a href=\"https://support.microsoft.com/en-us/help/4073235/cloud-protections-speculative-execution-side-channel-vulnerabilities\">here</a>.</p>\n<p><strong>Can I expect any performance impact after I configure the registry keys?</strong></p>\n<p>In some cases, installing these updates will have a performance impact. In testing Microsoft has seen some performance impact with these mitigations, in particular when hyperthreading is disabled. Microsoft values the security of its software and services and has made the decision to implement certain mitigation strategies in an effort to better secure our products. In some cases, mitigations are not enabled by default to allow users and administrators to evaluate the performance impact and risk exposure before deciding to enable the mitigations. We continue to work with hardware vendors to improve performance while maintaining a high level of security.</p>\n<p><strong>Are Microsoft Azure assets protected?</strong></p>\n<p>Microsoft is in the process of deploying mitigations across our cloud services and we expect this work to be complete soon. More information is available <a href=\"https://docs.microsoft.com/en-us/azure/virtual-machines/mitigate-se\">here</a>.</p>\n<p><strong>How do I know if I am affected?</strong></p>\n<p>Please refer to AMD advisory <a href=\"https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-7005\">AMD-SB-7005</a> to determine which AMD CPUs are affected.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How does this vulnerability affect Azure?</strong></p>\n<p>This vulnerability affected a limited set of Azure Virtual Machine offerings using certain AMD EPYC processors. An update is being deployed across Azure infrastructure and the majority of customers are secured in the process automatically. Most customers do not need to take any action.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there any action Azure customers need to take?</strong></p>\n<p>The majority of Azure customers are mitigated automatically by the update deployed across Azure and do not need to take any action. However, a small subset of customers with custom Maintenance Configurations on their Azure Virtual Machines may need to take action to apply the update. These customers will receive additional messaging through the Azure Portal via Azure Service Health with additional guidance.</p>\n"},{"Ordinal":"20","Title":"Microsoft Windows","Type":7,"Value":"Microsoft Windows"},{"Ordinal":"30","Title":"Advanced Micro Devices Inc.","Type":8,"Value":"Advanced Micro Devices Inc."},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"141","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12218","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"ProductID":["12218"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/virtual-machines/updates-maintenance-overview"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12218"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/virtual-machines/updates-maintenance-overview"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Revised the Affected Products table to include Azure Virtual Machines as customers who use custom maintenance controls are affected by CVE-2023-20569 and are required to take action to protect their resources. Microsoft has notified the customers using Azure Virtual Machines with custom maintenance controls through Azure Service Health in the Azure Portal.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12218"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12218"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"AMD: CVE-2023-20569 Return Address Predictor"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/filip_dragovic\">Filip Dragović</a>"}],"URL":[""]}],"CVE":"CVE-2023-38175","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11744"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker would be able to delete targeted files on a system.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<table>\n<thead>\n<tr>\n<th>References</th>\n<th>Identification</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Last version of the MpSigStub.exe affected by this vulnerability</td>\n<td>1.1.23060.3000</td>\n</tr>\n<tr>\n<td>First version of the MpSigStub.exe with this vulnerability addressed</td>\n<td>1.1.23060.3001</td>\n</tr>\n</tbody>\n</table>\n<p><strong>1. Why is no action required to install this update?</strong></p>\n<p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p>\n<p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p>\n<p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p>\n<p><strong>2. How often are the malware definitions updated?</strong></p>\n<p>Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p>\n<p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p>\n<p><strong>3. What is the MpSigStub.exe?</strong></p>\n<p>MpSigStub.exe is a component that’s responsible for installing definition updates.</p>\n<p><strong>4. Does this update contain any additional security-related changes to functionality?</strong></p>\n<p>Yes. In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p>\n<p><strong>5. Where can I find more information about Microsoft antimalware technology?</strong></p>\n<p>For more information, visit the <a href=\"https://www.microsoft.com/security/portal/\">Microsoft Malware Protection Center</a> website.</p>\n<p><strong>6. The definitions are not updating on my system. What do I do?</strong></p>\n<p>This security update is delivered only through definition updates. This cannot happen if Defender is in a disabled state (such as in the case of a third-party antivirus product providing real time protection). If Defender is disabled, you can delete the vulnerable file from the system: C:\\WINDOWS\\System32\\MpSigStub.exe.</p>\n<p>If Defender is re-enabled at a later time, MpSigStub.exe will be replaced only when updating signatures via Microsoft Update or WSUS. MpSigStub.exe will not be replaced via the standalone Mpam-fe.exe install through MMPC, or via UNC Path installs.</p>\n<h3 id=\"suggested-actions\">Suggested Actions</h3>\n<p><strong>Verify that the update is installed</strong></p>\n<p>Customers should verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded and installed for their Microsoft antimalware products.</p>\n<p>For more information on how to verify the version number for the Microsoft Malware Protection Engine that your software is currently using, see the section, &quot;Verifying Update Installation&quot;, in <a href=\"https://support.microsoft.com/kb/2510781\">Microsoft Knowledge Base Article 2510781</a>.</p>\n<p><strong>If necessary, install the update</strong></p>\n<p>Administrators of enterprise antimalware deployments should ensure that their update management software is configured to automatically approve and distribute engine updates and new malware definitions. Enterprise administrators should also verify that the latest version of the Microsoft Malware Protection Engine and definition updates are being actively downloaded, approved and deployed in their environment.</p>\n<p>For end-users, the affected software provides built-in mechanisms for the automatic detection and deployment of this update. For these customers, the update will be applied within 48 hours of its availability. The exact time frame depends on the software used, Internet connection, and infrastructure configuration.</p>\n<p>End users that do not wish to wait can manually update their antimalware software.</p>\n<p>For more information on how to manually update the Microsoft Malware Protection Engine and malware definitions, refer to <a href=\"https://support.microsoft.com/kb/2510781\">Microsoft Knowledge Base Article 2510781</a>.</p>\n"},{"Ordinal":"20","Title":"Windows Defender","Type":7,"Value":"Windows Defender"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"142","ProductStatuses":[{"ProductID":["11744"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.1.23060.3001","ProductID":["11744"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11744"],"SubType":"Release Notes","Type":3,"URL":"https://www.microsoft.com/en-us/wdsi/defenderupdates"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-11-28T00:00:00","Description":{"Value":"<p>Updated FAQ information. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11744"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11744"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Windows Defender Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-38172","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-126","Value":"Buffer Over-read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Windows Message Queuing","Type":7,"Value":"Windows Message Queuing"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"143","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"FixedBuild":"10.0.20348.1906","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028171","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029250","Type":3,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029250"},"ProductID":["11923","11924"],"Type":6,"URL":"https://support.microsoft.com/help/5029250"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029367"},"FixedBuild":"10.0.20348.1903","ProductID":["11923","11924"],"RestartRequired":{"Value":"No"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11923","11924"],"SubType":"5029367","Type":3,"URL":"https://support.microsoft.com/help/5029367"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029253"},"FixedBuild":"10.0.22000.2295","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028182","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11926","11927"],"SubType":"5029253","Type":3,"URL":"https://support.microsoft.com/help/5029253"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19044.3324","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11929","11930","11931"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"FixedBuild":"10.0.22621.2134","ProductID":["12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028185","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12085","12086"],"SubType":"5029263","Type":3,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029263"},"ProductID":["12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5029263"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029244"},"FixedBuild":"10.0.19045.3324","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028166","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12097","12098","12099"],"SubType":"5029244","Type":3,"URL":"https://support.microsoft.com/help/5029244"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029259"},"FixedBuild":"10.0.10240.20107","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028186","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10729","10735"],"SubType":"5029259","Type":3,"URL":"https://support.microsoft.com/help/5029259"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029242"},"FixedBuild":"10.0.14393.6167","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028169","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10852","10853","10816","10855"],"SubType":"5029242","Type":3,"URL":"https://support.microsoft.com/help/5029242"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028222","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029318","Type":3,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029318"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029318"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"FixedBuild":"6.0.6003.22216","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["9312","10287","9318","9344"],"SubType":"5029301","Type":3,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029301"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5029301"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028240","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029296","Type":3,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029296"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029296"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"FixedBuild":"6.1.7601.26664","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10051","10049"],"SubType":"5029307","Type":3,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029307"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5029307"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029295"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028232","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029295","Type":3,"URL":"https://support.microsoft.com/help/5029295"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029308"},"FixedBuild":"6.2.9200.24414","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10378","10379"],"SubType":"5029308","Type":3,"URL":"https://support.microsoft.com/help/5029308"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029312"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5028228","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029312","Type":3,"URL":"https://support.microsoft.com/help/5029312"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029304"},"FixedBuild":"6.3.9600.21503","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029304"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10483","10543"],"SubType":"5029304","Type":3,"URL":"https://support.microsoft.com/help/5029304"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Wenguang Jiao"}],"URL":[""]}],"CVE":"CVE-2023-38170","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12010"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How can I check if the update is installed?</strong></p>\n<p>If your device manufacturer preinstalled this app, package versions <strong>2.0.61931.0</strong> and later contain this update.</p>\n<p>If you purchased this app from the Microsoft Store, package versions <strong>2.0.61933.0</strong> and later contain this update.</p>\n<p>You can check the package version in PowerShell:</p>\n<p><code>Get-AppxPackage -Name Microsoft.HEVCVideoExtension*</code></p>\n"},{"Ordinal":"20","Title":"Microsoft Windows Codecs Library","Type":7,"Value":"Microsoft Windows Codecs Library"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"144","ProductStatuses":[{"ProductID":["12010","11808"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"VLSC"},"FixedBuild":"2.0.61931.0","ProductID":["12010"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12010"],"SubType":"VLSC","Type":3,"URL":"https://www.microsoft.com/Licensing/servicecenter/"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Description"},"FixedBuild":"2.0.61933.0","ProductID":["11808"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11808"],"SubType":"Description","Type":3,"URL":"https://www.microsoft.com/en-US/p/hevc-video-extensions/9nmzlz57r3t7?activetab=pivot:overviewtab"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12010"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11808"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12010"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11808"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"HEVC Video Extensions Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"bee13oy with <a href=\"https://www.cyberkl.com/\">Cyber Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-38169","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12180"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12181"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12197"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12195"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12185"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12194"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12198"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12184"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12193"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12196"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:T/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>If I normally install GDR versions and have not installed the June Cumulative Update, am I affected by the vulnerability?</strong></p>\n<p>Yes, customers who have installed <a href=\"https://support.microsoft.com/help/501522\">Microsoft SQL Server 2022 for x64-based Systems (GDR)</a> or <a href=\"https://support.microsoft.com/help/5021125\">Microsoft SQL Server 2019 for x64-based Systems (GDR)</a> are vulnerable. Microsoft recommends updating to the latest cumulative update to be protected from this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An attacker could exploit the vulnerability by tricking an authenticated user into attempting to connect to a malicious SQL server via OLEDB, which could result in the server receiving a malicious networking packet. This could allow the attacker to execute code remotely on the client.</p>\n"},{"Ordinal":"20","Title":"SQL Server","Type":7,"Value":"SQL Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"145","ProductStatuses":[{"ProductID":["12180","12181","12197","12195","12185","12194","12198","12184","12193","12196"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"19.3.0001.0","ProductID":["12180"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/oledb/download-oledb-driver-for-sql-server#download"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12180"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/oledb/release-notes-for-oledb-driver-for-sql-server#1931"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"18.6.0006.0","ProductID":["12181"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/oledb/release-notes-for-oledb-driver-for-sql-server#1866"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12181"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/oledb/release-notes-for-oledb-driver-for-sql-server#1866"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"18.2.1.1","ProductID":["12197"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/odbc/linux-mac/installing-the-microsoft-odbc-driver-for-sql-server#18"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12197"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/odbc/windows/release-notes-odbc-sql-server-windows#1822"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.10.4.1","ProductID":["12195"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/odbc/linux-mac/install-microsoft-odbc-driver-sql-server-macos#17"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12195"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/odbc/windows/release-notes-odbc-sql-server-windows#17104"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5026806"},"FixedBuild":"16.0.4053.3","ProductID":["12185"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=4fa9aa71-05f4-40ef-bc55-606ac00479b1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12185"],"SubType":"5026806","Type":3,"URL":"https://support.microsoft.com/help/5026806"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.10.4.1","ProductID":["12194"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/odbc/linux-mac/installing-the-microsoft-odbc-driver-for-sql-server#17"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12194"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/odbc/windows/release-notes-odbc-sql-server-windows#17104"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"18.2.1.1","ProductID":["12198"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/odbc/linux-mac/install-microsoft-odbc-driver-sql-server-macos#18"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12198"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/odbc/windows/release-notes-odbc-sql-server-windows#1822"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5025808"},"FixedBuild":"15.0.4316.3","ProductID":["12184"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=d58ff07b-8a08-4163-885c-a3e894e0f21a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12184"],"SubType":"5025808","Type":3,"URL":"https://support.microsoft.com/help/5025808"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.10.4.1","ProductID":["12193"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/odbc/download-odbc-driver-for-sql-server#version-17"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12193"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/odbc/windows/release-notes-odbc-sql-server-windows#17104"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"18.2.2.1","ProductID":["12196"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/sql/connect/odbc/download-odbc-driver-for-sql-server#download-for-windows"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12196"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/sql/connect/odbc/windows/release-notes-odbc-sql-server-windows#1822"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published. This CVE was addressed by SQL related updates that were released in June 2023, but the CVE was inadvertently omitted from the June 2023 Security Updates. This is an informational change only. Customers who have already installed the June 2023 update do not need to take any further action.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12180"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12181"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12197"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12195"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12185"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12194"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12198"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12184"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12193"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12196"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12180"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12181"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12197"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12195"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12185"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12194"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12198"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12184"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12193"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12196"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SQL OLE DB Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft Threat Intelligence"}],"URL":[""]},{"Name":[{"Value":"Microsoft Threat Intelligence"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/@tlansec\">Tom Lancaster</a> with <a href=\"https://www.volexity.com/\">Volexity</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/r00tbsd\">Paul Rascagneres</a> with <a href=\"https://www.volexity.com/\">Volexity</a>"}],"URL":[""]},{"Name":[{"Value":"Vlad Stolyarov, Clement Lecigne and Bahare Sabouri of Google’s Threat Analysis Group (TAG)"}],"URL":[""]}],"CVE":"ADV230003","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is this advisory related to the vulnerability that is documented by CVE-2023-36884 that was issued in July 2023?</strong></p>\n<p>Yes, this defense in depth update is not a vulnerability update, but installing this update stops the attack chain leading to the Windows Search Remote Code Execution Vulnerability (CVE-2023-36884). Microsoft recommends installing the Office updates discussed in this advisory as well as installing the Windows updates from August 2023.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"146","ProductStatuses":[{"ProductID":["10800","10801","11573","11574","11742","11762","11763","11952","11953","10692","10693","10694","10725","10726","10739","10740","10753","10754","10741","10742","10743","10744","10746","10747","10749","10750","10760","10761","10656","10654","10655","10603","10601","10602","10609","10610","10606","10604","10605"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4484489"},"FixedBuild":"15.0.5579.1001","ProductID":["10800"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484450","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=095c4762-8c16-4eb2-ad13-7a9b783d325e"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10800"],"SubType":"4484489","Type":3,"URL":"https://support.microsoft.com/help/4484489"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4484489"},"FixedBuild":"15.0.5579.1001","ProductID":["10801"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484450","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=6b8ad96c-39db-4652-a1e2-c27e667865fc"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10801"],"SubType":"4484489","Type":3,"URL":"https://support.microsoft.com/help/4484489"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11762","11763","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002391"},"FixedBuild":"15.0.5579.1001","ProductID":["11742"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484347","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11742"],"SubType":"5002391","Type":3,"URL":"https://support.microsoft.com/help/5002391"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002399"},"FixedBuild":"15.0.5579.1001","ProductID":["10692"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4493227","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5349afe1-d0d7-4bc3-981e-c12ad02f4eb4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10692"],"SubType":"5002399","Type":3,"URL":"https://support.microsoft.com/help/5002399"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002399"},"FixedBuild":"16.0.5408.1001","ProductID":["10693"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4493227","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=35cc42f2-44d9-489c-b536-bc118efa8b3f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10693"],"SubType":"5002399","Type":3,"URL":"https://support.microsoft.com/help/5002399"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002399"},"FixedBuild":"15.0.5579.1001","ProductID":["10694"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4493227","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10694"],"SubType":"5002399","Type":3,"URL":"https://support.microsoft.com/help/5002399"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002417"},"FixedBuild":"15.0.5579.1001","ProductID":["10725"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002332","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=48cd9112-c516-4db2-88d2-2fde980cfe14"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10725"],"SubType":"5002417","Type":3,"URL":"https://support.microsoft.com/help/5002417"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002417"},"FixedBuild":"15.0.5579.1001","ProductID":["10726"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002332","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=d0ee5377-8c47-478e-9269-16d67cc8c3ea"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10726"],"SubType":"5002417","Type":3,"URL":"https://support.microsoft.com/help/5002417"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002463"},"FixedBuild":"16.0.5408.1002","ProductID":["10739"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002351","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5b2826e7-01bb-4dc5-af73-753ee845f57d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10739"],"SubType":"5002463","Type":3,"URL":"https://support.microsoft.com/help/5002463"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002463"},"FixedBuild":"16.0.5408.1002","ProductID":["10740"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002351","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=bf124c47-f6f2-4851-9348-77128468d279"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10740"],"SubType":"5002463","Type":3,"URL":"https://support.microsoft.com/help/5002463"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002465"},"FixedBuild":"16.0.5408.1002","ProductID":["10753"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011126","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=c7c6b516-aa08-4d1e-8935-74625e0b7478"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10753"],"SubType":"5002465","Type":3,"URL":"https://support.microsoft.com/help/5002465"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002465"},"FixedBuild":"16.0.5408.1002","ProductID":["10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4011126","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=7cf8e974-3820-461d-bb2f-060c61dd721a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10754"],"SubType":"5002465","Type":3,"URL":"https://support.microsoft.com/help/5002465"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4504720"},"FixedBuild":"16.0.5408.1001","ProductID":["10741","10742"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4493224","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=36200b29-2fc6-4a85-8d00-ca65ba662d32"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10741","10742"],"SubType":"4504720","Type":3,"URL":"https://support.microsoft.com/help/4504720"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002418"},"FixedBuild":"16.0.5408.1002","ProductID":["10743"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002337","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=6cd0317b-3ca6-4c34-ad4f-607622509987"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10743"],"SubType":"5002418","Type":3,"URL":"https://support.microsoft.com/help/5002418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002418"},"FixedBuild":"16.0.5408.1002","ProductID":["10744"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002337","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=81a60a50-8fcd-4d4f-8bf6-bd28415dea2c"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10744"],"SubType":"5002418","Type":3,"URL":"https://support.microsoft.com/help/5002418"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002464"},"FixedBuild":"16.0.5408.1002","ProductID":["10746"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002323","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=72bf5493-bfd0-4459-977c-79f3b40bc363"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10746"],"SubType":"5002464","Type":3,"URL":"https://support.microsoft.com/help/5002464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002464"},"FixedBuild":"16.0.5408.1002","ProductID":["10747"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002323","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=b1e8bafa-3ce1-4efe-b368-72808ddfd84a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10747"],"SubType":"5002464","Type":3,"URL":"https://support.microsoft.com/help/5002464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002462"},"FixedBuild":"16.0.5408.1002","ProductID":["10749"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4493152","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=9edfdf28-4052-439f-95d0-4c17e29c20ae"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10749"],"SubType":"5002462","Type":3,"URL":"https://support.microsoft.com/help/5002462"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002462"},"FixedBuild":"16.0.5408.1002","ProductID":["10750"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4493152","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=34cae9be-9176-4fb1-8eca-2df1fc8c276d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10750"],"SubType":"5002462","Type":3,"URL":"https://support.microsoft.com/help/5002462"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002328"},"FixedBuild":"16.0.5408.1001","ProductID":["10760"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484441","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=995c7d0e-f1d0-4a41-9dfc-1a4b868786d5"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10760"],"SubType":"5002328","Type":3,"URL":"https://support.microsoft.com/help/5002328"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002328"},"FixedBuild":"16.0.5408.1001","ProductID":["10761"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484441","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5abd2842-f3bc-47a7-b7ba-81c5558fd8b1"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10761"],"SubType":"5002328","Type":3,"URL":"https://support.microsoft.com/help/5002328"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002451"},"FixedBuild":"15.0.5579.1001","ProductID":["10656"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10656"],"SubType":"5002451","Type":3,"URL":"https://support.microsoft.com/help/5002451"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002451"},"FixedBuild":"15.0.5579.1001","ProductID":["10654"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002348","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=ba9c1d96-de43-4dc1-a358-bd59af21b954"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10654"],"SubType":"5002451","Type":3,"URL":"https://support.microsoft.com/help/5002451"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002451"},"FixedBuild":"15.0.5579.1001","ProductID":["10655"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002348","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=571659e3-f35f-40ea-950a-6d5689b12ea3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10655"],"SubType":"5002451","Type":3,"URL":"https://support.microsoft.com/help/5002451"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002439"},"FixedBuild":"15.0.5579.1001","ProductID":["10603"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10603"],"SubType":"5002439","Type":3,"URL":"https://support.microsoft.com/help/5002439"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002439"},"FixedBuild":"15.0.5579.1001","ProductID":["10601"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=956c724d-2f20-4ebd-bf40-5a0977415514"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10601"],"SubType":"5002439","Type":3,"URL":"https://support.microsoft.com/help/5002439"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002439"},"FixedBuild":"15.0.5579.1001","ProductID":["10602"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=3ebcbd96-68f7-4d48-8aab-6d5f9a7d317e"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10602"],"SubType":"5002439","Type":3,"URL":"https://support.microsoft.com/help/5002439"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002391"},"FixedBuild":"15.0.5579.1001","ProductID":["10609"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484347","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=3bae6b8b-3b9f-4932-90a3-3ce0308f9ba4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10609"],"SubType":"5002391","Type":3,"URL":"https://support.microsoft.com/help/5002391"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002391"},"FixedBuild":"15.0.5579.1001","ProductID":["10610"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"4484347","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=6f68bc75-9acc-4595-94a9-eebbb6ec27ac"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10610"],"SubType":"5002391","Type":3,"URL":"https://support.microsoft.com/help/5002391"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002445"},"FixedBuild":"15.0.5579.1001","ProductID":["10606"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002316","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10606"],"SubType":"5002445","Type":3,"URL":"https://support.microsoft.com/help/5002445"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002445"},"FixedBuild":"15.0.5579.1001","ProductID":["10604"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002316","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=2a9a5ca1-bda7-48e3-bc8c-89582cb064ae"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10604"],"SubType":"5002445","Type":3,"URL":"https://support.microsoft.com/help/5002445"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002445"},"FixedBuild":"15.0.5579.1001","ProductID":["10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002316","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=6ef4e273-6636-452d-83ba-f40371d631f7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10605"],"SubType":"5002445","Type":3,"URL":"https://support.microsoft.com/help/5002445"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-10T00:00:00","Description":{"Value":"<p>Added acknowledgements. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10800"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10801"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11742"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10693"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10694"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10725"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10726"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10739"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10740"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10753"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10754"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10741"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10742"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10743"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10744"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10746"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10747"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10749"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10750"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10760"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10761"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10656"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10654"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10603"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10601"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10602"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10609"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10610"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10606"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10604"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["10605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10800"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10801"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11742"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10693"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10694"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10725"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10726"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10739"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10740"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10753"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10754"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10741"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10742"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10743"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10744"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10746"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10747"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10749"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10750"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10760"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10761"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10656"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10654"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10603"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10601"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10602"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10609"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10610"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10606"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10604"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:Yes;Latest Software Release:Exploitation Detected"},"Type":1}],"Title":{"Value":"Microsoft Office Defense in Depth Update"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-38157","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>This vulnerability requires a user to open a Web Archive file with spoofed origin of the web content in the affected version of Microsoft Edge (Chromium-based).</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H) but have no effect on integrity (I:N) or on availability (A:N). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploited the vulnerability could view sensitive information (Confidentiality). While the attacker can not make changes to disclosed information (Integrity) and limit access to the resource (Availability).</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p>\n<p>Attacker who succesfully exploit this vulnerability could cause the Edge browser to share addditional stored cookie when using the share feature.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"147","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-4068","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"148","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4068 Type Confusion in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-4069","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"149","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4069 Type Confusion in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-4070","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"150","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4070 Type Confusion in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-4071","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"151","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4071 Heap buffer overflow in Visuals"}},{"Acknowledgments":[],"CVE":"CVE-2023-4073","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"152","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4073 Out of bounds memory access in ANGLE"}},{"Acknowledgments":[],"CVE":"CVE-2023-4074","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"153","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4074 Use after free in Blink Task Scheduling"}},{"Acknowledgments":[],"CVE":"CVE-2023-4076","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"154","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4076 Use after free in WebRTC"}},{"Acknowledgments":[],"CVE":"CVE-2023-4075","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"155","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4075 Use after free in Cast"}},{"Acknowledgments":[],"CVE":"CVE-2023-4077","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"156","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4077 Insufficient data validation in Extensions"}},{"Acknowledgments":[],"CVE":"CVE-2023-4072","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"157","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4072 Out of bounds read and write in WebGL"}},{"Acknowledgments":[],"CVE":"CVE-2023-4078","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>115.0.1901.200</td>\n<td>8/07/2023</td>\n<td>115.0.5790.170/.171</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"158","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"115.0.1901.200","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4078 Inappropriate implementation in Extensions"}},{"Acknowledgments":[],"CVE":"CVE-2023-4572","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.69</td>\n<td>8/31/2023</td>\n<td>116.0.5845.140/.141</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"159","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.69","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-31T12:42:28","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4572 Use after free in MediaStream"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/tecr0c\">Rocco Calvi (@TecR0c)</a> with <a href=\"https://tecsecurity.io/\">TecSecurity</a>"}],"URL":[""]}],"CVE":"CVE-2023-35371","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11575"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11605"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11951"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-415","Value":"Double Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p>\n<p>The security update for Microsoft Office 2019 for Mac and Microsoft Office LTSC for Mac 2021 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the targeted environment.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Excel","Type":7,"Value":"Microsoft Office Excel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"160","ProductStatuses":[{"ProductID":["11573","11574","11575","11605","11762","11763","11951","11952","11953"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11762","11763","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"16.76.23081101","ProductID":["11575","11951"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11575","11951"],"SubType":"Release Notes","Type":3,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002435"},"FixedBuild":"16.0.10401.20022","ProductID":["11605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=7e8da1c4-ebec-4edc-87e0-3c895ef1e88f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11605"],"SubType":"5002435","Type":3,"URL":"https://support.microsoft.com/help/5002435"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Updated the build numbers. This is an informational update only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11575"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11575"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Office Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.notion.so/dong-uk-kim-91de2ceb59c44c6ea7533b0e8b2e35af\">Kim Dong-Uk (@justlikebono)</a>"}],"URL":[""]}],"CVE":"CVE-2023-35372","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10744"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10743"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the targeted environment.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Visio","Type":7,"Value":"Microsoft Office Visio"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"161","ProductStatuses":[{"ProductID":["11952","11763","11953","11762","11574","10744","10743","11573"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11952","11763","11953","11762","11574","11573"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11952","11763","11953","11762","11574","11573"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002565"},"FixedBuild":"5439.1000","ProductID":["10744","10743"],"RestartRequired":{"Value":"Maybe"},"SubType":"Other","Supercedence":"5002491","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10744","10743"],"SubType":"5002565","Type":3,"URL":"https://support.microsoft.com/help/5002565"}],"RevisionHistory":[{"Date":"2024-03-12T00:00:00","Description":{"Value":"<p>In the Security Updates table added Microsoft Visio 2016 (32-bit edition) and Microsoft Visio 2016 (64-bit edition) as these versions of Visio are also affected by the vulnerability. Microsoft strongly recommends that customers running any of these versions of Visio install the updates to be fully protected from the vulnerability. Customers whose systems are configured to receive automatic updates do not need to take any further action.</p>\n"},"Number":"2.0"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10744"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10743"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10744"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10743"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Office Visio Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"nicolas joly"}],"URL":[""]}],"CVE":"CVE-2023-29330","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12182"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12007"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12216"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11858"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>A user would need to join a malicious Microsoft Teams meeting set up by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and privilege required is none (PR:N). What is the target used in the context of the remote code execution?</strong></p>\n<p>An attacker would be required to trick the victim into joining a Teams meeting which would enable them to perform remote code execution in the context of the victim user. The attacker does not need privileges to attempt to exploit this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the client machine.</p>\n"},{"Ordinal":"20","Title":"Microsoft Teams","Type":7,"Value":"Microsoft Teams"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"162","ProductStatuses":[{"ProductID":["12182","12007","12216","11858"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.6.00.18681","ProductID":["12182"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://docs.microsoft.com/en-us/microsoftteams/teams-client-update"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12182"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/microsoftteams/teams-client-update"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.0.0.2023070204","ProductID":["12007"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://play.google.com/store/apps/details?id=com.microsoft.teams"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12007"],"SubType":"Release Notes","Type":3,"URL":"https://play.google.com/store/apps/details?id=com.microsoft.teams"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.6.00.17554","ProductID":["12216"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/microsoft-teams/download-app"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12216"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/officeupdates/teams-app-versioning"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"5.12.1","ProductID":["11858"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://apps.apple.com/us/app/microsoft-teams/id1113153706"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11858"],"SubType":"Release Notes","Type":3,"URL":"https://apps.apple.com/us/app/microsoft-teams/id1113153706"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12182"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12007"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12216"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11858"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12182"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12007"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12216"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11858"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Teams Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"nicolas joly"}],"URL":[""]}],"CVE":"CVE-2023-29328","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12182"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11858"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12007"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12216"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>A user would need to join a malicious Microsoft Teams meeting set up by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and privilege required is none (PR:N). What is the target used in the context of the remote code execution?</strong></p>\n<p>An attacker would be required to trick the victim into joining a Teams meeting which would enable them to perform remote code execution in the context of the victim user. The attacker does not need privileges to attempt to exploit this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the client machine.</p>\n"},{"Ordinal":"20","Title":"Microsoft Teams","Type":7,"Value":"Microsoft Teams"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"163","ProductStatuses":[{"ProductID":["12182","11858","12007","12216"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.6.00.18681","ProductID":["12182"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://docs.microsoft.com/en-us/microsoftteams/teams-client-update"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12182"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/microsoftteams/teams-client-update"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"5.12.1","ProductID":["11858"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://apps.apple.com/us/app/microsoft-teams/id1113153706"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11858"],"SubType":"Release Notes","Type":3,"URL":"https://apps.apple.com/us/app/microsoft-teams/id1113153706"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.0.0.2023070204","ProductID":["12007"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://play.google.com/store/apps/details?id=com.microsoft.teams"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12007"],"SubType":"Release Notes","Type":3,"URL":"https://play.google.com/store/apps/details?id=com.microsoft.teams"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.6.00.17554","ProductID":["12216"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/microsoft-teams/download-app"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12216"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/officeupdates/teams-app-versioning"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12182"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11858"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12007"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12216"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12182"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11858"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12007"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12216"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Teams Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lidor B. with Orca Security"}],"URL":[""]}],"CVE":"CVE-2023-36877","CVSSScoreSets":[{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11987"],"TemporalScore":3.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p>**According to the CVSS metric, user interaction is required (UI:R) and privileges required is high (PR:H). What does that mean for this vulnerability?</p>\n<p>An authorized attacker with administrator privileges must send a victim a malicious site and convince them to open it.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker would have to send the victim a malicious file that the victim would have to execute.</p>\n"},{"Ordinal":"20","Title":"Azure HDInsights","Type":7,"Value":"Azure HDInsights"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"164","ProductStatuses":[{"ProductID":["11987"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2307201242","ProductID":["11987"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-upgrade-cluster"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11987"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11987"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11987"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure Apache Oozie Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Lidor B. with Orca Security"}],"URL":[""]}],"CVE":"CVE-2023-36881","CVSSScoreSets":[{"BaseScore":4.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11987"],"TemporalScore":3.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker would have to send the victim a malicious file that the victim would have to execute.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p>**According to the CVSS metric, user interaction is required (UI:R) and privileges required is high (PR:H). What does that mean for this vulnerability?</p>\n<p>An authorized attacker with administrator privileges must send a victim a malicious site and convince them to open it.</p>\n"},{"Ordinal":"20","Title":"Azure HDInsights","Type":7,"Value":"Azure HDInsights"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"165","ProductStatuses":[{"ProductID":["11987"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2307201242","ProductID":["11987"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-upgrade-cluster"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11987"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/hdinsight/hdinsight-release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11987"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11987"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure Apache Ambari Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.xing.com/profile/martin_wrona3\">Martin Wrona (martin_jw)</a> with <a href=\"https://www.galaxus.ch/\">Digitec Galaxus AG</a>"}],"URL":[""]}],"CVE":"CVE-2023-36869","CVSSScoreSets":[{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12211"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/RL:O/RC:C"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12143"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/RL:O/RC:C"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12189"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/RL:O/RC:C"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11675"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker would have to send the victim a malicious link that the victim would have to click for a successful attack.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to minor loss of confidentiality (C:L), integrity (I:L) and availability (A:L). What does that mean for this vulnerability?</strong></p>\n<p>While we cannot rule out the impact to Confidentiality, Integrity, and Availability, the ability to exploit this vulnerability by itself is limited. The impact to Confidentiality and Integrity is limited to a single Azure DevOps organization or project, depending on the victim's credentials. Impact to Availability is limited to the victim only.</p>\n"},{"Ordinal":"20","Title":"Azure DevOps","Type":7,"Value":"Azure DevOps"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"166","ProductStatuses":[{"ProductID":["12211","12143","12189","11675"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"20230601.1","ProductID":["12211"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"file://cpvsbuild/drops/mseng/tfs/Dev17/releases_AzureDevOps2019.1.1public/layouts/x86ret/Tfs2018Sgn_20230601.1/enu/devops/Patch"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12211"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2019u1?view=azure-devops"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"20230601.3","ProductID":["12143"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"file://cpvsbuild/drops/mseng/tfs/Dev18/releases_M181.AzureDevOps2020.1.1public/layouts/x86ret/Tfs2018Sgn_20230601.3/enu/devops/Patch"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12143"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2020u1?view=azure-devops"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"20230602.5","ProductID":["12189"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"file://cpvsbuild/drops/mseng/tfs/Dev19/releases_M205.AzureDevOps2022.0.1/layouts/x86ret/Tfs2018Sgn_20230602.5/enu/devops/Patch"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12189"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2022?view=azure-devops"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"20230721.6","ProductID":["11675"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"file://cpvsbuild/drops/mseng/tfs/Dev17/releases_AzureDevOps2019.0.1public/layouts/x86ret/Tfs2018Sgn_20230721.6/enu/devops/Patch"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11675"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/devops/server/release-notes/azuredevops2019u1?view=azure-devops"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12211"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12143"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12189"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11675"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12211"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12143"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12189"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11675"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure DevOps Server Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Chris81"}],"URL":[""]}],"CVE":"CVE-2023-36890","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11585"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11961"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-284","Value":"Improper Access Control"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p>\n<p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>The attacker must be authenticated to the target site as at least a Site Member and have edit permissions for the site.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office SharePoint","Type":7,"Value":"Microsoft Office SharePoint"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"167","ProductStatuses":[{"ProductID":["11585","11961"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002423","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=838d6c3a-7b03-4b62-ab88-9a0a0e0f33c7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002436","Type":3,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002403","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5f8d695d-b900-4cb2-ad5a-361fce88ac7d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002422","Type":3,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"FixedBuild":"16.0.16130.20684","ProductID":["11961"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=66ec07ac-124a-4983-9710-9bf71c5b2adb"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11961"],"SubType":"5002437","Type":3,"URL":"https://support.microsoft.com/help/5002437"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"ProductID":["11961"],"Type":6,"URL":"https://support.microsoft.com/help/5002437"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11585"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11961"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11585"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11961"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Server Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Christoffer81"}],"URL":[""]}],"CVE":"CVE-2023-36891","CVSSScoreSets":[{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11585"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11961"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p>\n<p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the targeted environment.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office SharePoint","Type":7,"Value":"Microsoft Office SharePoint"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"168","ProductStatuses":[{"ProductID":["11585","11961"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002423","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=838d6c3a-7b03-4b62-ab88-9a0a0e0f33c7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002436","Type":3,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002403","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5f8d695d-b900-4cb2-ad5a-361fce88ac7d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002422","Type":3,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"FixedBuild":"16.0.16130.20684","ProductID":["11961"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=66ec07ac-124a-4983-9710-9bf71c5b2adb"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11961"],"SubType":"5002437","Type":3,"URL":"https://support.microsoft.com/help/5002437"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"ProductID":["11961"],"Type":6,"URL":"https://support.microsoft.com/help/5002437"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11585"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11961"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11585"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11961"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Server Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Felix Boulet"}],"URL":[""]}],"CVE":"CVE-2023-36892","CVSSScoreSets":[{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11585"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11961"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>The attacker must be authenticated and possess the permissions for page creation to be able to exploit this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to total loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploits this vulnerability could perform a remote attack that could enable access to the victim's information and the ability to alter information. Successful exploitation could also potentially cause downtime for the targeted environment.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p>\n<p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office SharePoint","Type":7,"Value":"Microsoft Office SharePoint"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"169","ProductStatuses":[{"ProductID":["11585","11961"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002423","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=838d6c3a-7b03-4b62-ab88-9a0a0e0f33c7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002436","Type":3,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002403","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5f8d695d-b900-4cb2-ad5a-361fce88ac7d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002422","Type":3,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"FixedBuild":"16.0.16130.20684","ProductID":["11961"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=66ec07ac-124a-4983-9710-9bf71c5b2adb"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11961"],"SubType":"5002437","Type":3,"URL":"https://support.microsoft.com/help/5002437"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"ProductID":["11961"],"Type":6,"URL":"https://support.microsoft.com/help/5002437"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11585"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11961"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11585"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11961"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Server Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/mantissts\">Richard Clifford</a> with <a href=\"https://rootshellsecurity.net/\">RootshellSecurity</a>"}],"URL":[""]}],"CVE":"CVE-2023-36893","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10765"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10766"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10810"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10811"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10407"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>Exploiting this vulnerability could allow the disclosure of NetNTLMv2 hashes.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>\n<p>No, the Preview Pane is not an attack vector.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>This vulnerability requires that a user with an affected version of Outlook open a malicious meeting or appointment invite from the attacker.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Outlook","Type":7,"Value":"Microsoft Office Outlook"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"170","ProductStatuses":[{"ProductID":["11573","11574","11762","11763","11952","11953","10765","10766","10810","10811","10407"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11762","11763","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002459"},"FixedBuild":"16.0.5408.1000","ProductID":["10765"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=f2efb529-2147-4669-9d3e-97273bb3bf90"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10765"],"SubType":"5002459","Type":3,"URL":"https://support.microsoft.com/help/5002459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002459"},"FixedBuild":"16.0.5408.1000","ProductID":["10766"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=c58b98e0-bd75-4a48-9932-32e793e532f4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10766"],"SubType":"5002459","Type":3,"URL":"https://support.microsoft.com/help/5002459"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002449"},"FixedBuild":"15.0.5579.1000","ProductID":["10810"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=e8ac702f-8bbe-45bb-b7c0-ee6271f0fcfe"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10810"],"SubType":"5002449","Type":3,"URL":"https://support.microsoft.com/help/5002449"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002449"},"FixedBuild":"15.0.5579.1000","ProductID":["10811"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=8dc780d9-2b7f-45b2-a63a-2e8c59a7148b"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10811"],"SubType":"5002449","Type":3,"URL":"https://support.microsoft.com/help/5002449"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002449"},"FixedBuild":"15.0.5579.1000","ProductID":["10407"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10407"],"SubType":"5002449","Type":3,"URL":"https://support.microsoft.com/help/5002449"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10765"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10766"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10810"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10811"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10407"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10765"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10766"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10810"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10811"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10407"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Outlook Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Nguyn Tin Giang of STAR Labs"}],"URL":[""]}],"CVE":"CVE-2023-36894","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10950"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11585"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11961"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p>\n<p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>The attacker must be authenticated to the target site, with the permission to use Manage Lists within SharePoint.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>An attacker that successfully exploited this vulnerability could leak private property values.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office SharePoint","Type":7,"Value":"Microsoft Office SharePoint"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"171","ProductStatuses":[{"ProductID":["10950","11585","11961"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002453"},"FixedBuild":"16.0.5408.1000","ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=9620decc-1296-4832-9dc8-1b1014b8d2c0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10950"],"SubType":"5002453","Type":3,"URL":"https://support.microsoft.com/help/5002453"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002453"},"ProductID":["10950"],"Type":6,"URL":"https://support.microsoft.com/help/5002453"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002398"},"FixedBuild":"16.0.5408.1000","ProductID":["10950"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=50f70439-5a2f-46e9-b002-6448fce3e117"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10950"],"SubType":"5002398","Type":3,"URL":"https://support.microsoft.com/help/5002398"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002398"},"ProductID":["10950"],"Type":6,"URL":"https://support.microsoft.com/help/5002398"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002423","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=838d6c3a-7b03-4b62-ab88-9a0a0e0f33c7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002436","Type":3,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002436"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"FixedBuild":"16.0.10401.20025","ProductID":["11585"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002403","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5f8d695d-b900-4cb2-ad5a-361fce88ac7d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11585"],"SubType":"5002422","Type":3,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002422"},"ProductID":["11585"],"Type":6,"URL":"https://support.microsoft.com/help/5002422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"FixedBuild":"16.0.16130.20684","ProductID":["11961"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=66ec07ac-124a-4983-9710-9bf71c5b2adb"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11961"],"SubType":"5002437","Type":3,"URL":"https://support.microsoft.com/help/5002437"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002437"},"ProductID":["11961"],"Type":6,"URL":"https://support.microsoft.com/help/5002437"}],"RevisionHistory":[{"Date":"2023-08-11T00:00:00","Description":{"Value":"<p>Updated acknowledgment.</p>\n"},"Number":"1.1"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10950"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11585"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11961"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10950"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11585"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11961"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft SharePoint Server Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Dan Cabrera with <a href=\"https://www.ctd.tech/\">Cross the Divide</a>"}],"URL":[""]}],"CVE":"CVE-2023-36895","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11575"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11951"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10753"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10754"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10606"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10604"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10605"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p>\n<p>The security update for Microsoft Office 2019 for Mac and Microsoft Office LTSC for Mac 2021 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>\n<p>Yes, the Preview Pane is an attack vector.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Outlook","Type":7,"Value":"Microsoft Office Outlook"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"172","ProductStatuses":[{"ProductID":["11573","11574","11575","11762","11763","11951","11952","11953","10753","10754","10606","10604","10605"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11762","11763","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"16.76.23081101","ProductID":["11575","11951"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11575","11951"],"SubType":"Release Notes","Type":3,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002464"},"FixedBuild":"16.0.5408.1002","ProductID":["10753"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002323","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=72bf5493-bfd0-4459-977c-79f3b40bc363"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10753"],"SubType":"5002464","Type":3,"URL":"https://support.microsoft.com/help/5002464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002464"},"FixedBuild":"16.0.5408.1002","ProductID":["10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002323","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=b1e8bafa-3ce1-4efe-b368-72808ddfd84a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10754"],"SubType":"5002464","Type":3,"URL":"https://support.microsoft.com/help/5002464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002445"},"FixedBuild":"15.0.5579.1001","ProductID":["10606"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002316","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10606"],"SubType":"5002445","Type":3,"URL":"https://support.microsoft.com/help/5002445"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002445"},"FixedBuild":"15.0.5579.1001","ProductID":["10604"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002316","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=2a9a5ca1-bda7-48e3-bc8c-89582cb064ae"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10604"],"SubType":"5002445","Type":3,"URL":"https://support.microsoft.com/help/5002445"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002445"},"FixedBuild":"15.0.5579.1001","ProductID":["10605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002316","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=6ef4e273-6636-452d-83ba-f40371d631f7"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10605"],"SubType":"5002445","Type":3,"URL":"https://support.microsoft.com/help/5002445"}],"RevisionHistory":[{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added an FAQ. This is an information change only.</p>\n"},"Number":"1.1"},{"Date":"2023-09-04T00:00:00","Description":{"Value":"<p>Updated product information in the Software Update table. This is an informational change only.</p>\n"},"Number":"1.3"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Updated the build numbers. This is an informational update only.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11575"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10753"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10754"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10606"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10604"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11575"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10753"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10754"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10606"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10604"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Outlook Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Office Security Team and Excel Engineering Team"}],"URL":[""]}],"CVE":"CVE-2023-36896","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11575"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11605"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11951"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10739"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10740"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10656"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10654"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10655"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Are the updates for the Microsoft Office for Mac currently available?</strong></p>\n<p>The security update for Microsoft Office 2019 for Mac and Microsoft Office LTSC for Mac 2021 are not immediately available. The updates will be released as soon as possible, and when they are available, customers will be notified via a revision to this CVE information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker must send the user a malicious file and convince them to open it.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Excel","Type":7,"Value":"Microsoft Office Excel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"173","ProductStatuses":[{"ProductID":["11573","11574","11575","11605","11762","11763","11951","11952","11953","10739","10740","10656","10654","10655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11762","11763","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"16.76.23081101","ProductID":["11575","11951"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11575","11951"],"SubType":"Release Notes","Type":3,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002435"},"FixedBuild":"16.0.10401.20022","ProductID":["11605"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=7e8da1c4-ebec-4edc-87e0-3c895ef1e88f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11605"],"SubType":"5002435","Type":3,"URL":"https://support.microsoft.com/help/5002435"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002463"},"FixedBuild":"16.0.5408.1002","ProductID":["10739"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002351","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5b2826e7-01bb-4dc5-af73-753ee845f57d"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10739"],"SubType":"5002463","Type":3,"URL":"https://support.microsoft.com/help/5002463"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002463"},"FixedBuild":"16.0.5408.1002","ProductID":["10740"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Supercedence":"5002351","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=bf124c47-f6f2-4851-9348-77128468d279"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10740"],"SubType":"5002463","Type":3,"URL":"https://support.microsoft.com/help/5002463"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002451"},"FixedBuild":"15.0.5579.1001","ProductID":["10656"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10656"],"SubType":"5002451","Type":3,"URL":"https://support.microsoft.com/help/5002451"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002451"},"FixedBuild":"15.0.5579.1001","ProductID":["10654"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=ba9c1d96-de43-4dc1-a358-bd59af21b954"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10654"],"SubType":"5002451","Type":3,"URL":"https://support.microsoft.com/help/5002451"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002451"},"FixedBuild":"15.0.5579.1001","ProductID":["10655"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=571659e3-f35f-40ea-950a-6d5689b12ea3"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10655"],"SubType":"5002451","Type":3,"URL":"https://support.microsoft.com/help/5002451"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Updated the build numbers. This is an informational update only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11575"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11605"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10739"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10740"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10656"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10654"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11575"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11605"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10739"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10740"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10656"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10654"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Excel Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Bill Demirkapi with Microsoft"}],"URL":[""]}],"CVE":"CVE-2023-36897","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11600"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12051"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11935"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12129"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12187"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12215"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>The user would have to click on install to be compromised by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An unauthenticated attacker could bypass validation as a trusted source through a crafted certificate that could mislead a user to believing the file they are installing is legitimate.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office","Type":7,"Value":"Microsoft Office"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"174","ProductStatuses":[{"ProductID":["11573","11574","11762","11763","11952","11953","11600","12051","11935","12129","12187","12215"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11762","11763","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"15.9.56","ProductID":["11600"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"http://aka.ms/vs/15/release/latest"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11600"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releasenotes/vs2017-relnotes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.2.18","ProductID":["12051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12051"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"16.11.29","ProductID":["11935"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2019 version 16.11"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11935"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releases/2019/release-notes-v16.11"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.4.10","ProductID":["12129"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12129"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.6.6","ProductID":["12187"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12187"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029497"},"FixedBuild":"10.0.60910","ProductID":["12215"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/download/details.aspx?id=105522"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12215"],"SubType":"5029497","Type":3,"URL":"https://support.microsoft.com/help/5029497"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029497"},"ProductID":["12215"],"Type":6,"URL":"https://support.microsoft.com/help/5029497"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>In the Security Updates table, added the Download link for Visual Studio 2010 Tools for Office Runtime.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11600"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11935"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12129"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12187"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12215"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11600"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11935"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12129"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12187"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12215"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Visual Studio Tools for Office Runtime Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"m4yfly with TianGong Team of Legendsec at Qi&#39;anxin Group"}],"URL":[""]}],"CVE":"CVE-2023-35388","CVSSScoreSets":[{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12191"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12039"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12038"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-502","Value":"Deserialization of Untrusted Data"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there anything that I should be aware of if I'm running a non-English operating system and version of Exchange server?</strong></p>\n<p>Yes, an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates. The script protecting customers from the vulnerability documented by <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709\">CVE-2023-21709</a> can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script.</p>\n<p>August 15, 2023 Update: The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n<p>Please see the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025\">Exchange Blog</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An authenticated attacker who is on the same intranet as the Exchange server can achieve remote code execution via a PowerShell remoting session.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). Does the attacker need to be in an authenticated role on the Exchange Server?</strong></p>\n<p>Yes, the attacker must be authenticated with LAN-access and have credentials for a valid Exchange user.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p>\n<p>An authenticated attacker could exploit this vulnerability with LAN access.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An authenticated attacker could gain remote code execution rights on the server mailbox backend as NT AUTHORITY\\SYSTEM.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"175","ProductStatuses":[{"ProductID":["12191","12039","12038"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1258.025","ProductID":["12191"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=593a50a5-595a-43b4-a258-2c97a910b87f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12191"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.01.2507.032","ProductID":["12039"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5025903","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=026d6264-dc26-4482-aad7-c7f8e250e872"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12039"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1118.037","ProductID":["12038"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5ffd5bed-1305-4505-b21a-caf4913d03da"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12038"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"}],"RevisionHistory":[{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added FAQ regarding a new known issue in the August Exchange security updates.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n"},"Number":"2.0"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12191"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12039"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12038"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12191"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12039"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12038"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Microsoft Exchange Server Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://github.com/ycdxsb\">ycdxsb</a> with <a href=\"http://www.iie.ac.cn/\">VARAS@IIE</a>"}],"URL":[""]}],"CVE":"CVE-2023-35390","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12051"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12129"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12187"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12009"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12130"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C"}],"CWE":[{"ID":"CWE-77","Value":"Improper Neutralization of Special Elements used in a Command ('Command Injection')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>\n<p>Additionally, an attacker could convince a local user to open a malicious file. The attacker would have to convince the user to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>\n<p>Additionally, an attacker could convince a local user to open a malicious file. The attacker would have to convince the user to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"20","Title":".NET Core","Type":7,"Value":".NET Core"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"176","ProductStatuses":[{"ProductID":["12051","12129","12187","12009","12130"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.2.18","ProductID":["12051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12051"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.4.10","ProductID":["12129"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12129"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.6.6","ProductID":["12187"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12187"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029688"},"FixedBuild":"6.0.21","ProductID":["12009"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/6.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12009"],"SubType":"5029688","Type":3,"URL":"https://support.microsoft.com/help/5029688"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029689"},"FixedBuild":"7.0.10","ProductID":["12130"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/7.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12130"],"SubType":"5029689","Type":3,"URL":"https://support.microsoft.com/help/5029689"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12129"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12187"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12009"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12130"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12129"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12187"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12009"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12130"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":".NET and Visual Studio Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Brennan Conroy"}],"URL":[""]}],"CVE":"CVE-2023-35391","CVSSScoreSets":[{"BaseScore":6.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12051"],"TemporalScore":5.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12129"],"TemporalScore":5.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12187"],"TemporalScore":5.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11564"],"TemporalScore":5.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12009"],"TemporalScore":5.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"},{"BaseScore":6.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12130"],"TemporalScore":5.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>This vulnerability makes it possible to listen to any group or user with a specially crafted group/username. By exploiting this vulnerability, the attacker can now receive messages for group(s) that they are unauthorized to view.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is information disclosure?</strong></p>\n<p>The attack itself is carried out locally. For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> (AV:L) and <strong>User Interaction</strong> is <strong>Required</strong> (UI:R), this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and run a malicious application. This could lead to a local attack on the user's device which could leak data.</p>\n"},{"Ordinal":"20","Title":"ASP.NET and Visual Studio","Type":7,"Value":"ASP.NET and Visual Studio"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"177","ProductStatuses":[{"ProductID":["12051","12129","12187","11564","12009","12130"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.2.18","ProductID":["12051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12051"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.4.10","ProductID":["12129"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12129"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.6.6","ProductID":["12187"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12187"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2.1.40","ProductID":["11564"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/dotnet/announcements/issues/XXX"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11564"],"SubType":"Release Notes","Type":3,"URL":"https://github.com/dotnet/announcements/issues/XXX"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029688"},"FixedBuild":"6.0.21","ProductID":["12009"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/6.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12009"],"SubType":"5029688","Type":3,"URL":"https://support.microsoft.com/help/5029688"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029689"},"FixedBuild":"7.0.10","ProductID":["12130"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/7.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12130"],"SubType":"5029689","Type":3,"URL":"https://support.microsoft.com/help/5029689"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Updated one or more CVSS scores for the affected products and added an FAQ explaining the vector string settings. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12129"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12187"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11564"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12009"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12130"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12129"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12187"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11564"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12009"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12130"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-38182","CVSSScoreSets":[{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12191"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12039"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12038"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-502","Value":"Deserialization of Untrusted Data"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there anything that I should be aware of if I'm running a non-English operating system and version of Exchange server?</strong></p>\n<p>Yes, an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates. The script protecting customers from the vulnerability documented by <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709\">CVE-2023-21709</a> can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script.</p>\n<p>August 15, 2023 Update: The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n<p>Please see the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025\">Exchange Blog</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An authenticated attacker who is on the same intranet as the Exchange server can achieve remote code execution via a PowerShell remoting session.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p>\n<p>An authenticated attacker could exploit this vulnerability with LAN access.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). Does the attacker need to be in an authenticated role on the Exchange Server?</strong></p>\n<p>Yes, the attacker must be authenticated with LAN-access and have credentials for a valid Exchange user.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"178","ProductStatuses":[{"ProductID":["12191","12039","12038"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1258.025","ProductID":["12191"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=593a50a5-595a-43b4-a258-2c97a910b87f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12191"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.01.2507.032","ProductID":["12039"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5025903","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=026d6264-dc26-4482-aad7-c7f8e250e872"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12039"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1118.037","ProductID":["12038"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5ffd5bed-1305-4505-b21a-caf4913d03da"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12038"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"}],"RevisionHistory":[{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added FAQ regarding a new known issue in the August Exchange security updates.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n"},"Number":"2.0"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12191"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12039"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12038"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12191"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12039"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12038"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Microsoft Exchange Server Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Piotr Bazydlo (@chudypb) of <a href=\"https://www.zerodayinitiative.com/\">Trend Micro Zero Day Initiative</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/arudd1ck\">Andrew Ruddick</a> with Microsoft Security Response Center"}],"URL":[""]}],"CVE":"CVE-2023-38181","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12038"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12039"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12191"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-502","Value":"Deserialization of Untrusted Data"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An authenticated attacker could achieve exploitation by using a PowerShell remoting session to the server.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p>\n<p>The attack vector is set to Network because this vulnerability is remotely exploitable and can be exploited from the internet.</p>\n<p>The attack complexity is set to Low because an attacker does not require significant prior knowledge of the cluster/system and can achieve repeatable success when attempting to exploit this vulnerability.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is there anything that I should be aware of if I'm running a non-English operating system and version of Exchange server?</strong></p>\n<p>Yes, an issue has been discovered with the non-English August updates of Exchange Server and you should postpone installing these updates. The script protecting customers from the vulnerability documented by <a href=\"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21709\">CVE-2023-21709</a> can be run to protect against the vulnerability without installing the August updates. Microsoft recommends running the script.</p>\n<p>August 15, 2023 Update: The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n<p>Please see the <a href=\"https://techcommunity.microsoft.com/t5/exchange-team-blog/re-release-of-august-2023-exchange-server-security-update/ba-p/3900025\">Exchange Blog</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H) and availability (A:H). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could access a user's Net-NTLMv2 hash which could be used as a basis of an NTLM Relay attack against another service to authenticate as the user.</p>\n"},{"Ordinal":"20","Title":"Microsoft Exchange Server","Type":7,"Value":"Microsoft Exchange Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"179","ProductStatuses":[{"ProductID":["12038","12039","12191"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1118.037","ProductID":["12038"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=5ffd5bed-1305-4505-b21a-caf4913d03da"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12038"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.01.2507.032","ProductID":["12039"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5025903","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=026d6264-dc26-4482-aad7-c7f8e250e872"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12039"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5030524"},"FixedBuild":"15.02.1258.025","ProductID":["12191"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5026261","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=593a50a5-595a-43b4-a258-2c97a910b87f"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12191"],"SubType":"5030524","Type":3,"URL":"https://support.microsoft.com/help/5030524"}],"RevisionHistory":[{"Date":"2023-08-09T00:00:00","Description":{"Value":"<p>Added FAQ regarding a new known issue in the August Exchange security updates.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>The known issue affecting the non-English August updates of Exchange Server has been resolved. Microsoft recommends installing the updated packages as soon as possible.</p>\n"},"Number":"2.0"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12038"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12039"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12191"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12038"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12039"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12191"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Exchange Server Spoofing Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-38180","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11564"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12009"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12130"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12051"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12129"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12187"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"ASP.NET","Type":7,"Value":"ASP.NET"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"180","ProductStatuses":[{"ProductID":["11564","12009","12130","12051","12129","12187"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"2.1.40","ProductID":["11564"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://github.com/dotnet/announcements/issues/269"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11564"],"SubType":"Release Notes","Type":3,"URL":"https://github.com/dotnet/announcements/issues/269"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029688"},"FixedBuild":"6.0.21","ProductID":["12009"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/6.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12009"],"SubType":"5029688","Type":3,"URL":"https://support.microsoft.com/help/5029688"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029689"},"FixedBuild":"7.0.10","ProductID":["12130"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/7.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12130"],"SubType":"5029689","Type":3,"URL":"https://support.microsoft.com/help/5029689"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.2.18","ProductID":["12051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12051"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.4.10","ProductID":["12129"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12129"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.6.6","ProductID":["12187"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.6"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12187"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"}],"RevisionHistory":[{"Date":"2023-08-11T00:00:00","Description":{"Value":"<p>Updated CVE to correct exploit status. This is an informational update only.</p>\n"},"Number":"1.1"},{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11564"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12009"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12130"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12129"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12187"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11564"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12009"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12130"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12129"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12187"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected"},"Type":1}],"Title":{"Value":".NET and Visual Studio Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://zeroc.com\">Benoit Foucher</a>"}],"URL":[""]}],"CVE":"CVE-2023-38178","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12009"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12129"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-400","Value":"Uncontrolled Resource Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":".NET Core","Type":7,"Value":".NET Core"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"181","ProductStatuses":[{"ProductID":["12009","12051","12129"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029688"},"FixedBuild":"6.0.21","ProductID":["12009"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://dotnet.microsoft.com/download/dotnet/6.0"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12009"],"SubType":"5029688","Type":3,"URL":"https://support.microsoft.com/help/5029688"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.2.18","ProductID":["12051"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.2"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12051"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/visualstudio/releases/2022/release-notes"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"17.4.10","ProductID":["12129"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.4"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12129"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12009"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12129"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12009"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12129"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":".NET Core and Visual Studio Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Guy Arazi with Microsoft"}],"URL":[""]},{"Name":[{"Value":"Vladimir Abramzon with Microsoft"}],"URL":[""]}],"CVE":"CVE-2023-38176","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12217"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-22","Value":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What can an attacker do with this vulnerability?</strong></p>\n<p>An elevation of privilege vulnerability exists in the Azure Connected Machine Agent used with the Azure Arc-Enabled Servers service. This impacts both Linux and Windows servers. A low privilege user on the machine where the agent is installed can chain two vulnerabilities in HIMDS to get root/admin access on the server.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to exploit two separate vulnerabilities to gain elevated privileges.</p>\n"},{"Ordinal":"20","Title":"Azure Arc","Type":7,"Value":"Azure Arc"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"182","ProductStatuses":[{"ProductID":["12217"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.33.02399.0","ProductID":["12217"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-arc/servers/manage-agent?tabs=windows"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12217"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-release-notes"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12217"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12217"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Azure Arc-Enabled Servers Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2023-38154","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"183","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"FixedBuild":"10.0.17763.4737","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5028168","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11568","11569","11570","11571","11572"],"SubType":"5029247","Type":3,"URL":"https://support.microsoft.com/help/5029247"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029247"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5029247"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[],"CVE":"ADV230004","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>The Memory Integrity System Readiness Scan Tool (hvciscan_amd64.exe and hvciscan_arm64.exe) is used to check for compatibility issues with memory integrity, also known as hypervisor-protected code integrity (HVCI). The original version was published without a RSRC section, which contains resource information for a module. The new version addresses this issue. Please see <a href=\"https://learn.microsoft.com/en-us/windows-hardware/test/hlk/testref/driver-compatibility-with-device-guard\">Driver compatibility with memory integrity and VBS</a> for more information.</p>\n"},{"Ordinal":"20","Title":"Memory Integrity System Readiness Scan Tool","Type":7,"Value":"Memory Integrity System Readiness Scan Tool"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"184","ProductStatuses":[{"ProductID":["12221"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"10.0.25884.1000","ProductID":["12221"],"RestartRequired":{"Value":"No"},"SubType":"Update","Type":2,"URL":"https://www.microsoft.com/en-us/download/details.aspx?id=105437"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12221"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/windows-hardware/design/device-experiences/oem-hvci-enablement"}],"RevisionHistory":[{"Date":"2023-08-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Defense in Depth"},"ProductID":["12221"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["12221"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely"},"Type":1}],"Title":{"Value":"Memory Integrity System Readiness Scan Tool Defense in Depth Update"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/_r0ny\">Jo&#227;o Domingos (@_r0ny)</a>"}],"URL":[""]}],"CVE":"CVE-2023-36769","CVSSScoreSets":[{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10762"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10763"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10793"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10794"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":4.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10795"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Microsoft Office OneNote","Type":7,"Value":"Microsoft Office OneNote"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"185","ProductStatuses":[{"ProductID":["11573","11574","11952","11953","10762","10763","10793","10794","10795"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11573","11574","11952","11953"],"SubType":"Click to Run","Type":3,"URL":"https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4484434"},"FixedBuild":"16.0.5408.1000","ProductID":["10762"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=285cadec-bb8a-4e64-a20d-50d90920895b"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10762"],"SubType":"4484434","Type":3,"URL":"https://support.microsoft.com/help/4484434"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4484434"},"FixedBuild":"16.0.5408.1000","ProductID":["10763"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=f1769f29-d539-4bb6-9e61-ea88e6943808"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10763"],"SubType":"4484434","Type":3,"URL":"https://support.microsoft.com/help/4484434"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022167"},"FixedBuild":"15.0.5579.1000","ProductID":["10793"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=a3d8a6a4-cccc-4ead-a9c6-f3aae67c2620"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10793"],"SubType":"4022167","Type":3,"URL":"https://support.microsoft.com/help/4022167"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022167"},"FixedBuild":"15.0.5579.1000","ProductID":["10794"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=fd8a10d2-02bc-4340-9ad9-c48677d18b4a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10794"],"SubType":"4022167","Type":3,"URL":"https://support.microsoft.com/help/4022167"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"4022167"},"FixedBuild":"15.0.5579.1000","ProductID":["10795"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["10795"],"SubType":"4022167","Type":3,"URL":"https://support.microsoft.com/help/4022167"}],"RevisionHistory":[{"Date":"2023-08-15T00:00:00","Description":{"Value":"<p>Information published. This CVE was addressed by updates that were released in August 2023, but the CVE was inadvertently omitted from the August 2023 Security Updates. Microsoft strongly recommends that customers running affected versions of OneNote install the updates to be protected from this vulnerability.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10793"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10794"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10795"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10793"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10794"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["10795"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No"},"Type":1}],"Title":{"Value":"Microsoft OneNote Spoofing Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-2312","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"186","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:15","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-2312 Use after free in Offline"}},{"Acknowledgments":[],"CVE":"CVE-2023-4349","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"187","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:20","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4349 Use after free in Device Trust Connectors"}},{"Acknowledgments":[],"CVE":"CVE-2023-4368","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"188","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4368 Insufficient policy enforcement in Extensions API"}},{"Acknowledgments":[],"CVE":"CVE-2023-4367","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"189","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4367 Insufficient policy enforcement in Extensions API"}},{"Acknowledgments":[],"CVE":"CVE-2023-4366","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"190","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4366 Use after free in Extensions"}},{"Acknowledgments":[],"CVE":"CVE-2023-4365","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"191","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4365 Inappropriate implementation in Fullscreen"}},{"Acknowledgments":[],"CVE":"CVE-2023-4364","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"192","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4364 Inappropriate implementation in Permission Prompts"}},{"Acknowledgments":[],"CVE":"CVE-2023-4363","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"193","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4363 Inappropriate implementation in WebShare"}},{"Acknowledgments":[],"CVE":"CVE-2023-4362","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"194","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4362 Heap buffer overflow in Mojom IDL"}},{"Acknowledgments":[],"CVE":"CVE-2023-4361","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"195","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4361 Inappropriate implementation in Autofill"}},{"Acknowledgments":[],"CVE":"CVE-2023-4360","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"196","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4360 Inappropriate implementation in Color"}},{"Acknowledgments":[],"CVE":"CVE-2023-4359","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"197","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4359 Inappropriate implementation in App Launcher"}},{"Acknowledgments":[],"CVE":"CVE-2023-4358","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"198","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4358 Use after free in DNS"}},{"Acknowledgments":[],"CVE":"CVE-2023-4357","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"199","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML"}},{"Acknowledgments":[],"CVE":"CVE-2023-4356","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"200","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4356 Use after free in Audio"}},{"Acknowledgments":[],"CVE":"CVE-2023-4355","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"201","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4355 Out of bounds memory access in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-4354","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"202","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4354 Heap buffer overflow in Skia"}},{"Acknowledgments":[],"CVE":"CVE-2023-4353","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"203","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4353 Heap buffer overflow in ANGLE"}},{"Acknowledgments":[],"CVE":"CVE-2023-4352","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"204","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4352 Type Confusion in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-4351","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"205","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4351 Use after free in Network"}},{"Acknowledgments":[],"CVE":"CVE-2023-4350","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"206","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3}],"Title":{"Value":"Chromium: CVE-2023-4350 Inappropriate implementation in Fullscreen"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-36741","CVSSScoreSets":[{"BaseScore":8.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":7.2,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is higher than normal?</strong></p>\n<p><a href=\"https://www.microsoft.com/en-us/msrc/bounty-new-edge\">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity, specifically it says, &quot;If a bug requires more than a click, a key press, or several preconditions, the severity will be downgraded&quot;. The CVSS scoring system doesn't allow for this type of nuance.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could allow the attacker to gain the privileges needed to perform code execution.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>\n<p>This vulnerability could lead to a contained execution environment escape. Please refer to <a href=\"https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation\">AppContainer Isolation</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.62</td>\n<td>8/25/2023</td>\n<td>116.0.5845.110/.111</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"207","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.62","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-10-17T00:00:00","Description":{"Value":"<p>Added an FAQ. This is an information change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://github.com/marto55555\">Martin Minchev</a>"}],"URL":[""]}],"CVE":"CVE-2023-38158","CVSSScoreSets":[{"BaseScore":3.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":2.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>116.0.1938.54</td>\n<td>8/21/2023</td>\n<td>116.0.5845.96/.97</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p>\n<p>Exploitation of this vulnerability only discloses limited information, no sensitive information can be obtained.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>Exploitation of the vulnerability requires the victim to open the vulnerable app.</p>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"208","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"116.0.1938.54","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["11655"],"SubType":"Release Notes","Type":3,"URL":"https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security"}],"RevisionHistory":[{"Date":"2023-08-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-4004","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-4004"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-4004"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"209","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-4004"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-4004"}],"RevisionHistory":[{"Date":"2023-08-04T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-3812","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3812"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3812"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"210","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3812"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3812"}],"RevisionHistory":[{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-23003","CVSSScoreSets":[{"BaseScore":4.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12137"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12138"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":4.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":4.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"cve@mitre.org","Type":8,"Value":"cve@mitre.org"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"211","ProductStatuses":[{"ProductID":["12137","12138","12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-oprofile-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.10.174.1-1.cm1.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.10.174.1-1.cm1.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.10.174.1-1","ProductID":["12137"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12137"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.10.174.1-1.cm1.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.10.174.1-1.cm1.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.10.174.1-1","ProductID":["12138"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12138"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.122.1-2.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.118.1-2","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.122.1-2.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.118.1-2","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-23003"}],"RevisionHistory":[{"Date":"2023-03-09T16:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-29T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12137"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12138"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12137"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12138"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2016-3709","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2016-3709"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2016-3709"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"212","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-libxml2-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-devel-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-debuginfo-2.10.4-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"libxml2"},"FixedBuild":"2.10.4-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"libxml2","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2016-3709"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-libxml2-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-devel-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-debuginfo-2.10.4-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"libxml2"},"FixedBuild":"2.10.4-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"libxml2","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2016-3709"}],"RevisionHistory":[{"Date":"2022-08-05T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2022-25881","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2022-25881"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2022-25881"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"report@snyk.io","Type":8,"Value":"report@snyk.io"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"213","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"nodejs-16.20.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"nodejs-devel-16.20.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"nodejs-debuginfo-16.20.1-2.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"nodejs"},"FixedBuild":"16.20.1-2","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"nodejs","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2022-25881"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"nodejs-16.20.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"nodejs-devel-16.20.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"nodejs-debuginfo-16.20.1-2.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"nodejs"},"FixedBuild":"16.20.1-2","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"nodejs","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2022-25881"}],"RevisionHistory":[{"Date":"2023-02-01T16:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-28484","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"cve@mitre.org","Type":8,"Value":"cve@mitre.org"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"214","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-libxml2-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-devel-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-debuginfo-2.10.4-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"libxml2"},"FixedBuild":"2.10.4-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"libxml2","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-libxml2-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-devel-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-debuginfo-2.10.4-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"libxml2"},"FixedBuild":"2.10.4-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"libxml2","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-28484"}],"RevisionHistory":[{"Date":"2023-04-24T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-21102","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-21102"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-21102"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"security@android.com","Type":8,"Value":"security@android.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"215","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-5.15.118.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervkvpd-5.15.118.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervvssd-5.15.118.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervfcopyd-5.15.118.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-license-5.15.118.1-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-tools-5.15.118.1-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-debuginfo-5.15.118.1-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"hyperv-daemons"},"FixedBuild":"5.15.118.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"hyperv-daemons","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-21102"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-5.15.118.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervkvpd-5.15.118.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervvssd-5.15.118.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervfcopyd-5.15.118.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-license-5.15.118.1-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-tools-5.15.118.1-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-debuginfo-5.15.118.1-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"hyperv-daemons"},"FixedBuild":"5.15.118.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"hyperv-daemons","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-21102"}],"RevisionHistory":[{"Date":"2023-05-28T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-3863","CVSSScoreSets":[{"BaseScore":4.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":4.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":4.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":4.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":4.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12137"],"TemporalScore":4.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":4.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12138"],"TemporalScore":4.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3863"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3863"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3863"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"216","ProductStatuses":[{"ProductID":["12139","12140","12137","12138"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.122.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.122.1-2.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.122.1-2","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3863"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.122.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.122.1-2.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.122.1-2","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3863"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-headers-5.4.51-2.cm1.noarch.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.10.188.1-1","ProductID":["12137","12138"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12137","12138"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3863"}],"RevisionHistory":[{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-01T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12137"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12138"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12137"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12138"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-32248","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-32248"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-32248"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"217","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-32248"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-32248"}],"RevisionHistory":[{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-3567","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3567"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-3567"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"218","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3567"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-3567"}],"RevisionHistory":[{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-2860","CVSSScoreSets":[{"BaseScore":4.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":4.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":4.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":4.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-2860"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-2860"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"219","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-2860"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.126.1-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.126.1-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.126.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-2860"}],"RevisionHistory":[{"Date":"2023-08-04T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-33951","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"220","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervvssd-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-tools-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"hyperv-daemons"},"FixedBuild":"5.15.158.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"hyperv-daemons","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.135.1-2.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.135.1-2","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervvssd-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-tools-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"hyperv-daemons"},"FixedBuild":"5.15.158.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"hyperv-daemons","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.135.1-2.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.135.1-2","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33951"}],"RevisionHistory":[{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-07-30T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-33952","CVSSScoreSets":[{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":6.7,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"secalert@redhat.com","Type":8,"Value":"secalert@redhat.com"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"221","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervkvpd-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervvssd-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervfcopyd-5.15.158.2-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-tools-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-debuginfo-5.15.158.2-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"hyperv-daemons"},"FixedBuild":"5.15.158.1-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"hyperv-daemons","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.135.1-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.135.1-2.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.135.1-2","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervkvpd-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervvssd-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hypervfcopyd-5.15.158.2-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-license-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-tools-5.15.158.2-1.cm2.noarch.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"hyperv-daemons-debuginfo-5.15.158.2-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"hyperv-daemons"},"FixedBuild":"5.15.158.1-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"hyperv-daemons","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-devel-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-accessibility-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-gpu-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-drivers-sound-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-docs-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-tools-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-perf-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-dtb-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"bpftool-5.15.135.1-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"kernel-debuginfo-5.15.135.1-2.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"kernel"},"FixedBuild":"5.15.135.1-2","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"kernel","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-33952"}],"RevisionHistory":[{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-07-30T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2023-29469","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"cve@mitre.org","Type":8,"Value":"cve@mitre.org"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"222","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-libxml2-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-devel-2.10.4-1.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-debuginfo-2.10.4-1.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"libxml2"},"FixedBuild":"2.10.4-1","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12139"],"SubType":"libxml2","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469"},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"python3-libxml2-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-devel-2.10.4-1.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"libxml2-debuginfo-2.10.4-1.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"libxml2"},"FixedBuild":"2.10.4-1","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12140"],"SubType":"libxml2","Type":3,"URL":"https://nvd.nist.gov/vuln/detail/CVE-2023-29469"}],"RevisionHistory":[{"Date":"2023-04-24T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-08-02T17:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3}],"Title":{}},{"Acknowledgments":[{"Name":[{"Value":"Darrick Joo"}],"URL":[""]}],"CVE":"CVE-2023-38167","CVSSScoreSets":[{"BaseScore":7.2,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12219"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-284","Value":"Improper Access Control"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is high (PR:H). What privileges does an attacker require to exploit this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to already have admin or high privilege access to a security group within the tenant.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is the update for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 listed in this vulnerability currently available?</strong></p>\n<p>The security update for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 is not immediately available. The update will be released as soon as possible, and when it is available, customers will be notified via a revision to this CVE information.</p>\n<p>August 15. 2023 Update: The security update for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 is now available. Customers running Microsoft Dynamics 365 Business Central 2023 Release Wave 1 should install the update to be protected from the vulnerability.</p>\n"},{"Ordinal":"20","Title":"Dynamics Business Central Control","Type":7,"Value":"Dynamics Business Central Control"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"223","ProductStatuses":[{"ProductID":["12219"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5029765"},"FixedBuild":"22.0.59520","ProductID":["12219"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/download/details.aspx?id=105436"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["12219"],"SubType":"5029765","Type":3,"URL":"https://support.microsoft.com/help/5029765"}],"RevisionHistory":[{"Date":"2023-08-08T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-08-10T07:00:00","Description":{"Value":"<p>Updated the build numbers. This is an informational update only.</p>\n"},"Number":"1.1"},{"Date":"2023-08-15T07:00:00","Description":{"Value":"<p>In the Security Updates table, made the following revision: The security update for Microsoft Dynamics 365 Business Central 2023 Release Wave 1 is now available. Customers running this affected version of Microsoft Dynamics 365 Business Central 2023 should install the update to be protected from this vulnerability.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12219"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12219"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely"},"Type":1}],"Title":{"Value":"Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability"}}]}
View Git Blame Copy Permalink