2 lines
844 KiB
JSON
2 lines
844 KiB
JSON
{"DocumentNotes":[{"Audience":"Public","Ordinal":"0","Title":"Release Notes","Type":1,"Value":"<h2 id=\"this-release-consists-of-the-following-37-microsoft-cves\">This release consists of the following 37 Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>Tag</th>\n<th>CVE</th>\n<th>Base Score</th>\n<th>CVSS Vector</th>\n<th>Exploitability</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Windows Media</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21740\">CVE-2023-21740</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure DevOps</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-21751\">CVE-2023-21751</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35618\">CVE-2023-35618</a></td>\n<td>9.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Outlook</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35619\">CVE-2023-35619</a></td>\n<td>5.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35621\">CVE-2023-35621</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Windows DNS</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35622\">CVE-2023-35622</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Connected Machine Agent</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35624\">CVE-2023-35624</a></td>\n<td>7.3</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Azure Machine Learning</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35625\">CVE-2023-35625</a></td>\n<td>4.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows MSHTML Platform</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35628\">CVE-2023-35628</a></td>\n<td>8.1</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows USB Mass Storage Class Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35629\">CVE-2023-35629</a></td>\n<td>6.8</td>\n<td>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35630\">CVE-2023-35630</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Win32K</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35631\">CVE-2023-35631</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35632\">CVE-2023-35632</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35633\">CVE-2023-35633</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Bluetooth Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35634\">CVE-2023-35634</a></td>\n<td>8.0</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35635\">CVE-2023-35635</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Outlook</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35636\">CVE-2023-35636</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows DHCP Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35638\">CVE-2023-35638</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows ODBC Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35639\">CVE-2023-35639</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35641\">CVE-2023-35641</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Internet Connection Sharing (ICS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35642\">CVE-2023-35642</a></td>\n<td>6.5</td>\n<td>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows DHCP Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35643\">CVE-2023-35643</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Kernel-Mode Drivers</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-35644\">CVE-2023-35644</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>XAML Diagnostics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36003\">CVE-2023-36003</a></td>\n<td>6.7</td>\n<td>CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows DPAPI (Data Protection Application Programming Interface)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36004\">CVE-2023-36004</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Telephony Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36005\">CVE-2023-36005</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft WDAC OLE DB provider for SQL</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36006\">CVE-2023-36006</a></td>\n<td>8.8</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Office Word</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36009\">CVE-2023-36009</a></td>\n<td>5.5</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Defender</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36010\">CVE-2023-36010</a></td>\n<td>7.5</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td>No</td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Win32K</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36011\">CVE-2023-36011</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows DHCP Server</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36012\">CVE-2023-36012</a></td>\n<td>5.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Power Platform Connector</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36019\">CVE-2023-36019</a></td>\n<td>9.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td><strong>Yes</strong></td>\n</tr>\n<tr>\n<td>Microsoft Dynamics</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36020\">CVE-2023-36020</a></td>\n<td>7.6</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Local Security Authority Subsystem Service (LSASS)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36391\">CVE-2023-36391</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Windows Cloud Files Mini Filter Driver</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36696\">CVE-2023-36696</a></td>\n<td>7.8</td>\n<td>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C</td>\n<td>Exploitation More Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-36880\">CVE-2023-36880</a></td>\n<td>4.8</td>\n<td>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-38174\">CVE-2023-38174</a></td>\n<td>4.3</td>\n<td>CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C</td>\n<td>Exploitation Less Likely</td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"we-are-republishing-6-non-microsoft-cves\">We are republishing 6 non-Microsoft CVEs:</h2>\n<table>\n<thead>\n<tr>\n<th>CNA</th>\n<th>Tag</th>\n<th>CVE</th>\n<th>FAQs?</th>\n<th>Workarounds?</th>\n<th>Mitigations?</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-6508\">CVE-2023-6508</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-6509\">CVE-2023-6509</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-6510\">CVE-2023-6510</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-6511\">CVE-2023-6511</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>Chrome</td>\n<td>Microsoft Edge (Chromium-based)</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-6512\">CVE-2023-6512</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n<tr>\n<td>AMD</td>\n<td>Chipsets</td>\n<td><a href=\"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2023-20588\">CVE-2023-20588</a></td>\n<td><strong>Yes</strong></td>\n<td>No</td>\n<td>No</td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"security-update-guide-blog-posts\">Security Update Guide Blog Posts</h2>\n<table>\n<thead>\n<tr>\n<th>Date</th>\n<th>Blog Post</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>January 11, 2022</td>\n<td><a href=\"https://aka.ms/SUGNotificationProfile\">Coming Soon: New Security Update Guide Notification System</a></td>\n</tr>\n<tr>\n<td>February 9, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/\">Continuing to Listen: Good News about the Security Update Guide API</a></td>\n</tr>\n<tr>\n<td>January 13, 2021</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/\">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td>\n</tr>\n<tr>\n<td>December 8, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/\">Security Update Guide: Let’s keep the conversation going</a></td>\n</tr>\n<tr>\n<td>November 9, 2020</td>\n<td><a href=\"https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/\">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td>\n</tr>\n</tbody>\n</table>\n<h2 id=\"relevant-resources\">Relevant Resources</h2>\n<ul>\n<li>The new Hotpatching feature is now generally available. Please see <a href=\"https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure\">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li>\n<li>Windows 10 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10, in addition to non-security updates. The updates are available via the <a href=\"https://www.catalog.update.microsoft.com/Home.aspx\">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 operating systems, please see <a href=\"https://docs.microsoft.com/en-us/lifecycle/faq/windows\">Windows Lifecycle Facts Sheet</a>.</li>\n<li>Microsoft is improving Windows Release Notes. For more information, please see <a href=\"https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399\">What's next for Windows release notes</a>.</li>\n<li>A list of the latest servicing stack updates for each operating system can be found in <a href=\"https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001\">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li>\n<li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li>\n<li>Customers running Windows 7, Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href=\"https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e\">4522133</a> for more information.</li>\n</ul>\n<h2 id=\"known-issues\">Known Issues</h2>\n<p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p>\n<p>For more information about Windows Known Issues, please see <a href=\"https://docs.microsoft.com/en-us/windows/release-information/windows-message-center\">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p>\n<table>\n<thead>\n<tr>\n<th>KB Article</th>\n<th>Applies To</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033369\">5033369</a></td>\n<td>Windows 11, version 21H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033371\">5033371</a></td>\n<td>Windows 10, version 1809, Windows Server 2019</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033372\">5033372</a></td>\n<td>Windows 10, version 21H2, Windows 10, version 22H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033375\">5033375</a></td>\n<td>Windows 11, version 22H2, Windows 11, version 23H2</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033422\">5033422</a></td>\n<td>Windows Server 2008 (Monthly Rollup)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033424\">5033424</a></td>\n<td>Windows Server 2008 R2 (Security-only update)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033427\">5033427</a></td>\n<td>Windows Server 2008 (Security-only update)</td>\n</tr>\n<tr>\n<td><a href=\"https://support.microsoft.com/help/5033433\">5033433</a></td>\n<td>Windows Server 2008 R2 (Monthly Rollup)</td>\n</tr>\n</tbody>\n</table>\n"},{"Audience":"Public","Ordinal":"1","Title":"Legal Disclaimer","Type":5,"Value":"The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply."}],"DocumentPublisher":{"ContactDetails":{"Value":"secure@microsoft.com"},"IssuingAuthority":{"Value":"The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc."},"Type":0},"DocumentTitle":{"Value":"December 2023 Security Updates"},"DocumentTracking":{"CurrentReleaseDate":"2026-11-05T14:58:58","Identification":{"Alias":{"Value":"2023-Dec"},"ID":{"Value":"2023-Dec"}},"InitialReleaseDate":"2023-12-12T08:00:00","RevisionHistory":[{"Date":"2026-11-05T14:58:58","Description":{"Value":"December 2023 Security Updates"},"Number":"149"}],"Status":2,"Version":"1.0"},"DocumentType":{"Value":"Security Update"},"ProductTree":{"Branch":[{"Items":[{"Items":[{"ProductID":"11568","Value":"Windows 10 Version 1809 for 32-bit Systems"},{"ProductID":"11569","Value":"Windows 10 Version 1809 for x64-based Systems"},{"ProductID":"11570","Value":"Windows 10 Version 1809 for ARM64-based Systems"},{"ProductID":"11571","Value":"Windows Server 2019"},{"ProductID":"11572","Value":"Windows Server 2019 (Server Core installation)"},{"ProductID":"11923","Value":"Windows Server 2022"},{"ProductID":"11924","Value":"Windows Server 2022 (Server Core installation)"},{"ProductID":"11926","Value":"Windows 11 version 21H2 for x64-based Systems"},{"ProductID":"11927","Value":"Windows 11 version 21H2 for ARM64-based Systems"},{"ProductID":"11929","Value":"Windows 10 Version 21H2 for 32-bit Systems"},{"ProductID":"11930","Value":"Windows 10 Version 21H2 for ARM64-based Systems"},{"ProductID":"11931","Value":"Windows 10 Version 21H2 for x64-based Systems"},{"ProductID":"12085","Value":"Windows 11 Version 22H2 for ARM64-based Systems"},{"ProductID":"12086","Value":"Windows 11 Version 22H2 for x64-based Systems"},{"ProductID":"12097","Value":"Windows 10 Version 22H2 for x64-based Systems"},{"ProductID":"12098","Value":"Windows 10 Version 22H2 for ARM64-based Systems"},{"ProductID":"12099","Value":"Windows 10 Version 22H2 for 32-bit Systems"},{"ProductID":"12244","Value":"Windows Server 2022, 23H2 Edition (Server Core installation)"},{"ProductID":"12243","Value":"Windows 11 Version 23H2 for x64-based Systems"},{"ProductID":"12242","Value":"Windows 11 Version 23H2 for ARM64-based Systems"},{"ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"ProductID":"10816","Value":"Windows Server 2016"},{"ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"}],"Name":"Windows","Type":1},{"Items":[{"ProductID":"11921","Value":"Microsoft Dynamics 365 (on-premises) version 9.1"},{"ProductID":"11664","Value":"Microsoft Dynamics 365 (on-premises) version 9.0"},{"ProductID":"12263","Value":"Microsoft Power Platform"},{"ProductID":"12268","Value":"Dynamics 365 for Finance and Operations Version 10.0.38 Platform Update 62"},{"ProductID":"12267","Value":"Dynamics 365 for Finance and Operations Version 10.0.37 Platform Update 61"},{"ProductID":"12269","Value":"Dynamics 365 for Finance and Operations Platform Update 60"}],"Name":"Microsoft Dynamics","Type":1},{"Items":[{"ProductID":"11573","Value":"Microsoft Office 2019 for 32-bit editions"},{"ProductID":"11574","Value":"Microsoft Office 2019 for 64-bit editions"},{"ProductID":"11762","Value":"Microsoft 365 Apps for Enterprise for 32-bit Systems"},{"ProductID":"11763","Value":"Microsoft 365 Apps for Enterprise for 64-bit Systems"},{"ProductID":"11951","Value":"Microsoft Office LTSC for Mac 2021"},{"ProductID":"11952","Value":"Microsoft Office LTSC 2021 for 64-bit editions"},{"ProductID":"11953","Value":"Microsoft Office LTSC 2021 for 32-bit editions"},{"ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"}],"Name":"Microsoft Office","Type":1},{"Items":[{"ProductID":"10378","Value":"Windows Server 2012"},{"ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"ProductID":"10483","Value":"Windows Server 2012 R2"},{"ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"}],"Name":"ESU","Type":1},{"Items":[{"ProductID":"11655","Value":"Microsoft Edge (Chromium-based)"}],"Name":"Browser","Type":1},{"Items":[{"ProductID":"12266","Value":"Azure Machine Learning SDK"},{"ProductID":"12228","Value":"Azure Logic Apps"},{"ProductID":"12264","Value":"Azure Connected Machine Agent"},{"ProductID":"12270","Value":"Azure DevOps Server 2022.1"}],"Name":"Azure","Type":1},{"Items":[{"ProductID":"12183","Value":"Microsoft Malware Protection Platform"}],"Name":"System Center","Type":1},{"Items":[{"ProductID":"12143","Value":"Azure DevOps Server 2020.1.2"}],"Name":"Developer Tools","Type":1},{"Items":[{"ProductID":"12139","Value":"CBL Mariner 2.0 x64"},{"ProductID":"12140","Value":"CBL Mariner 2.0 ARM"},{"ProductID":"18241-16823","Value":"cbl2 strongswan 5.9.10-3 on CBL Mariner 2.0"},{"ProductID":"18242-17084","Value":"azl3 strongswan 5.9.12-1 on Azure Linux 3.0"},{"ProductID":"18222-16823","Value":"cbl2 sudo 1.9.15p5-1 on CBL Mariner 2.0"},{"ProductID":"17218-16823","Value":"cbl2 mysql 8.0.40-1 on CBL Mariner 2.0"},{"ProductID":"18235-16823","Value":"cbl2 curl 8.5.0-1 on CBL Mariner 2.0"},{"ProductID":"17734-17084","Value":"azl3 cmake 3.29.6-1 on Azure Linux 3.0"},{"ProductID":"17607-17084","Value":"azl3 mysql 8.0.40-1 on Azure Linux 3.0"},{"ProductID":"17809-17084","Value":"azl3 cmake 3.28.2-6 on Azure Linux 3.0"},{"ProductID":"18223-16823","Value":"cbl2 apparmor 3.0.4-3 on CBL Mariner 2.0"},{"ProductID":"18224-16823","Value":"cbl2 openssh 8.9p1-3 on CBL Mariner 2.0"},{"ProductID":"18225-17084","Value":"azl3 openssh 9.7p1-1 on Azure Linux 3.0"},{"ProductID":"18197-16823","Value":"cbl2 postfix 3.7.0-3 on CBL Mariner 2.0"},{"ProductID":"18198-17084","Value":"azl3 postfix 3.9.0-1 on Azure Linux 3.0"},{"ProductID":"17452-16823","Value":"cbl2 kernel 5.15.148.1-1 on CBL Mariner 2.0"},{"ProductID":"17095-17086","Value":"cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0"},{"ProductID":"18239-16823","Value":"cbl2 postgresql 14.10-1 on CBL Mariner 2.0"},{"ProductID":"18226-16823","Value":"cbl2 xorg-x11-server 1.20.10-5 on CBL Mariner 2.0"},{"ProductID":"17712-17084","Value":"azl3 python3 3.12.3-1 on Azure Linux 3.0"},{"ProductID":"18220-16823","Value":"cbl2 kernel 5.15.143.1-1 on CBL Mariner 2.0"},{"ProductID":"18230-16823","Value":"cbl2 kernel 5.15.145.2-1 on CBL Mariner 2.0"},{"ProductID":"19529-17084","Value":"azl3 kernel 6.6.92.2-1 on Azure Linux 3.0"},{"ProductID":"17065-17084","Value":"azl3 kernel 6.6.35.1-4 on Azure Linux 3.0"},{"ProductID":"17375-16823","Value":"cbl2 golang 1.21.6-1 on CBL Mariner 2.0"},{"ProductID":"18156-16823","Value":"cbl2 msft-golang 1.20.0-1 on CBL Mariner 2.0"},{"ProductID":"18157-16823","Value":"cbl2 golang 1.20.0-1 on CBL Mariner 2.0"},{"ProductID":"18158-17084","Value":"azl3 golang 1.20.0-1 on Azure Linux 3.0"},{"ProductID":"18221-16823","Value":"cbl2 shadow-utils 4.9-14 on CBL Mariner 2.0"},{"ProductID":"17843-16823","Value":"cbl2 perl 5.34.1-489 on CBL Mariner 2.0"},{"ProductID":"18421-17084","Value":"azl3 espeak-ng 1.51.1-1 on Azure Linux 3.0"},{"ProductID":"18420-17084","Value":"azl3 espeak-ng 1.52.0-1 on Azure Linux 3.0"},{"ProductID":"18228-16823","Value":"cbl2 libtiff 4.6.0-6 on CBL Mariner 2.0"},{"ProductID":"18229-17084","Value":"azl3 libtiff 4.6.0-6 on Azure Linux 3.0"},{"ProductID":"18016-16823","Value":"cbl2 qemu 6.2.0-22 on CBL Mariner 2.0"},{"ProductID":"18233-17084","Value":"azl3 qemu 8.2.0-1 on Azure Linux 3.0"},{"ProductID":"18535-17084","Value":"azl3 qemu 6.2.0-18 on Azure Linux 3.0"},{"ProductID":"18231-16823","Value":"cbl2 bluez 5.63-5 on CBL Mariner 2.0"},{"ProductID":"18232-17084","Value":"azl3 bluez 5.63-6 on Azure Linux 3.0"},{"ProductID":"18234-16823","Value":"cbl2 mysql 8.0.35-2 on CBL Mariner 2.0"},{"ProductID":"17956-16823","Value":"cbl2 cmake 3.21.4-13 on CBL Mariner 2.0"},{"ProductID":"18085-17084","Value":"azl3 cf-cli 8.7.3-6 on Azure Linux 3.0"},{"ProductID":"19339-17084","Value":"azl3 kubevirt 1.2.0-17 on Azure Linux 3.0"},{"ProductID":"18199-16823","Value":"cbl2 moby-engine 20.10.27-1 on CBL Mariner 2.0"},{"ProductID":"18200-16823","Value":"cbl2 jsch 0.1.55-2 on CBL Mariner 2.0"},{"ProductID":"18201-16823","Value":"cbl2 terraform 1.3.2-25 on CBL Mariner 2.0"},{"ProductID":"18130-16823","Value":"cbl2 packer 1.9.5-3 on CBL Mariner 2.0"},{"ProductID":"17414-16823","Value":"cbl2 moby-compose 2.17.3-5 on CBL Mariner 2.0"},{"ProductID":"18202-16823","Value":"cbl2 moby-cli 20.10.27-2 on CBL Mariner 2.0"},{"ProductID":"18203-16823","Value":"cbl2 kubevirt 0.59.0-26 on CBL Mariner 2.0"},{"ProductID":"18204-16823","Value":"cbl2 kubernetes 1.28.4-4 on CBL Mariner 2.0"},{"ProductID":"18205-16823","Value":"cbl2 openssh 8.9p1-4 on CBL Mariner 2.0"},{"ProductID":"18206-16823","Value":"cbl2 nmap 7.93-2 on CBL Mariner 2.0"},{"ProductID":"18207-16823","Value":"cbl2 libssh2 1.9.0-4 on CBL Mariner 2.0"},{"ProductID":"18208-16823","Value":"cbl2 libssh 0.10.6-1 on CBL Mariner 2.0"},{"ProductID":"18209-16823","Value":"cbl2 erlang 25.2-1 on CBL Mariner 2.0"},{"ProductID":"18210-16823","Value":"cbl2 cert-manager 1.11.2-7 on CBL Mariner 2.0"},{"ProductID":"18211-17084","Value":"azl3 node-problem-detector 0.8.20-2 on Azure Linux 3.0"},{"ProductID":"17801-17084","Value":"azl3 docker-buildx 0.14.0-1 on Azure Linux 3.0"},{"ProductID":"18041-17084","Value":"azl3 packer 1.9.5-1 on Azure Linux 3.0"},{"ProductID":"18212-17084","Value":"azl3 nmap 7.93-2 on Azure Linux 3.0"},{"ProductID":"18213-17084","Value":"azl3 libssh2 1.11.1-1 on Azure Linux 3.0"},{"ProductID":"18214-17084","Value":"azl3 libssh 0.10.6-1 on Azure Linux 3.0"},{"ProductID":"18215-17084","Value":"azl3 kubevirt 1.2.0-9 on Azure Linux 3.0"},{"ProductID":"17753-17084","Value":"azl3 kubernetes 1.30.1-1 on Azure Linux 3.0"},{"ProductID":"18216-17084","Value":"azl3 erlang 26.2.3-1 on Azure Linux 3.0"},{"ProductID":"18217-17084","Value":"azl3 cf-cli 8.7.11-1 on Azure Linux 3.0"},{"ProductID":"17766-17084","Value":"azl3 cert-manager 1.12.12-1 on Azure Linux 3.0"},{"ProductID":"19605-17084","Value":"azl3 erlang 26.2.5.12-1 on Azure Linux 3.0"},{"ProductID":"19453-17084","Value":"azl3 openssh 9.8p1-4 on Azure Linux 3.0"},{"ProductID":"18082-17084","Value":"azl3 node-problem-detector 0.8.15-4 on Azure Linux 3.0"},{"ProductID":"18240-16823","Value":"cbl2 fish 3.6.2-1 on CBL Mariner 2.0"},{"ProductID":"16838-16823","Value":"cbl2 kernel 5.15.153.1-1 on CBL Mariner 2.0"},{"ProductID":"18227-16823","Value":"cbl2 ncurses 6.4-3 on CBL Mariner 2.0"},{"ProductID":"17405-21692","Value":"cbl2 telegraf 1.28.5-5 on CBL-Mariner 2.0"},{"ProductID":"18163-16823","Value":"cbl2 telegraf 1.29.4-1 on CBL Mariner 2.0"},{"ProductID":"18164-17084","Value":"azl3 telegraf 1.29.4-1 on Azure Linux 3.0"},{"ProductID":"17405-17086","Value":"cbl2 telegraf 1.28.5-5 on CBL Mariner 2.0"},{"ProductID":"18218-16823","Value":"cbl2 ansible 2.14.11-1 on CBL Mariner 2.0"},{"ProductID":"17822-17084","Value":"azl3 ansible 2.17.0-1 on Azure Linux 3.0"},{"ProductID":"17445-17086","Value":"cbl2 ansible 2.14.12-2 on CBL Mariner 2.0"},{"ProductID":"18179-16823","Value":"cbl2 qt5-qtbase 5.12.11-10 on CBL Mariner 2.0"},{"ProductID":"17680-17084","Value":"azl3 qtbase 6.6.2-1 on Azure Linux 3.0"},{"ProductID":"17384-17086","Value":"cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0"},{"ProductID":"17785-17084","Value":"azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0"},{"ProductID":"17748-17084","Value":"azl3 hyperv-daemons 6.6.29.1-1 on Azure Linux 3.0"},{"ProductID":"17828-16823","Value":"cbl2 hyperv-daemons 5.15.145.2-1 on CBL Mariner 2.0"},{"ProductID":"17445-16823","Value":"cbl2 ansible 2.14.12-2 on CBL Mariner 2.0"},{"ProductID":"19262-17084","Value":"azl3 postgresql 16.7-1 on Azure Linux 3.0"},{"ProductID":"17174-16823","Value":"cbl2 postgresql 14.14-1 on CBL Mariner 2.0"},{"ProductID":"17062-17084","Value":"azl3 kernel 6.6.29.1-4 on Azure Linux 3.0"},{"ProductID":"18145-16823","Value":"cbl2 msft-golang 1.21.5-1 on CBL Mariner 2.0"},{"ProductID":"18146-16823","Value":"cbl2 golang 1.21.5-1 on CBL Mariner 2.0"},{"ProductID":"18147-16823","Value":"cbl2 msft-golang 1.22.3-1. on CBL Mariner 2.0"},{"ProductID":"18413-17084","Value":"azl3 systemd 255-20 on Azure Linux 3.0"},{"ProductID":"17473-17084","Value":"azl3 jq 1.7.1-2 on Azure Linux 3.0"}],"Name":"Mariner","Type":1},{"Items":[{"ProductID":"20127-17084","Value":"azl3 strongswan 5.9.11-1 on Azure Linux 3.0"},{"ProductID":"19690-17084","Value":"azl3 mysql 8.0.36-1 on Azure Linux 3.0"},{"ProductID":"20442-17084","Value":"azl3 apparmor 3.1.7-1 on Azure Linux 3.0"},{"ProductID":"19897-17084","Value":"azl3 openssh 9.5p1-2 on Azure Linux 3.0"},{"ProductID":"19749-17086","Value":"cbl2 postfix 3.7.4-1 on CBL Mariner 2.0"},{"ProductID":"19753-17084","Value":"azl3 postfix 3.7.0-2 on Azure Linux 3.0"},{"ProductID":"19673-17086","Value":"cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0"},{"ProductID":"19964-17084","Value":"azl3 python3 3.12.0-4 on Azure Linux 3.0"},{"ProductID":"19778-17086","Value":"cbl2 golang 1.17.13-2 on CBL Mariner 2.0"},{"ProductID":"19785-17086","Value":"cbl2 golang 1.18.8-7 on CBL Mariner 2.0"},{"ProductID":"19697-17084","Value":"azl3 golang 1.24.3-1 on Azure Linux 3.0"},{"ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"ProductID":"19954-17086","Value":"cbl2 perl 5.34.1-490 on CBL Mariner 2.0"},{"ProductID":"19683-17084","Value":"azl3 kernel 6.6.96.2-1 on Azure Linux 3.0"},{"ProductID":"20412-17084","Value":"azl3 kernel 6.6.96.2-2 on Azure Linux 3.0"},{"ProductID":"20613-17084","Value":"azl3 kernel 6.6.112.1-2 on Azure Linux 3.0"},{"ProductID":"20725-17084","Value":"azl3 kernel 6.6.117.1-1 on Azure Linux 3.0"},{"ProductID":"20823-17084","Value":"azl3 kernel 6.6.119.3-3 on Azure Linux 3.0"},{"ProductID":"20860-17084","Value":"azl3 kernel 6.6.121.1-1 on Azure Linux 3.0"},{"ProductID":"20956-17084","Value":"azl3 kernel 6.6.126.1-1 on Azure Linux 3.0"},{"ProductID":"21094-17084","Value":"azl3 kernel 6.6.130.1-3 on Azure Linux 3.0"},{"ProductID":"21248-17084","Value":"azl3 kernel 6.6.134.1-2 on Azure Linux 3.0"},{"ProductID":"21474-17084","Value":"azl3 kernel 6.6.143.1-1 on Azure Linux 3.0"},{"ProductID":"21580-17084","Value":"azl3 kernel 6.6.144.1-1 on Azure Linux 3.0"},{"ProductID":"21626-17084","Value":"azl3 kernel 6.6.145.2-1 on Azure Linux 3.0"},{"ProductID":"21684-17084","Value":"azl3 kernel 6.6.150.1-1 on Azure Linux 3.0"},{"ProductID":"21892-17084","Value":"azl3 kernel 6.6.152.1-1 on Azure Linux 3.0"},{"ProductID":"21932-17084","Value":"azl3 kernel 6.6.157.1-1 on Azure Linux 3.0"},{"ProductID":"20553-17084","Value":"azl3 kernel 6.6.104.2-4 on Azure Linux 3.0"},{"ProductID":"20788-17084","Value":"azl3 kernel 6.6.119.3-1 on Azure Linux 3.0"},{"ProductID":"21308-17084","Value":"azl3 kernel 6.6.137.1-2 on Azure Linux 3.0"},{"ProductID":"21332-17084","Value":"azl3 kernel 6.6.138.1-1 on Azure Linux 3.0"},{"ProductID":"21344-17084","Value":"azl3 kernel 6.6.139.1-1 on Azure Linux 3.0"},{"ProductID":"21443-17084","Value":"azl3 kernel 6.6.141.1-1 on Azure Linux 3.0"},{"ProductID":"22276-17084","Value":"azl3 kernel 6.6.159.1-1 on Azure Linux 3.0"},{"ProductID":"20073-17084","Value":"azl3 libssh 0.10.5-2 on Azure Linux 3.0"},{"ProductID":"19863-17084","Value":"azl3 cert-manager 1.11.2-8 on Azure Linux 3.0"},{"ProductID":"19986-17084","Value":"azl3 kubernetes 1.29.1-4 on Azure Linux 3.0"},{"ProductID":"19962-17084","Value":"azl3 packer 1.9.4-1 on Azure Linux 3.0"},{"ProductID":"19808-17084","Value":"azl3 docker-buildx 0.12.1-1 on Azure Linux 3.0"},{"ProductID":"19855-17084","Value":"azl3 ncurses 6.4-2 on Azure Linux 3.0"},{"ProductID":"20013-17086","Value":"cbl2 telegraf 1.28.5-5 on CBL Mariner 2.0"},{"ProductID":"19664-17084","Value":"azl3 telegraf 1.27.3-4 on Azure Linux 3.0"},{"ProductID":"19716-17084","Value":"azl3 ansible 2.15.3-1 on Azure Linux 3.0"},{"ProductID":"19710-17086","Value":"cbl2 ansible 2.14.12-2 on CBL Mariner 2.0"},{"ProductID":"19737-17086","Value":"cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0"},{"ProductID":"19741-17084","Value":"azl3 qtbase 6.6.1-1 on Azure Linux 3.0"},{"ProductID":"19874-17086","Value":"cbl2 hyperv-daemons 5.15.139.1-1 on CBL Mariner 2.0"},{"ProductID":"19701-17086","Value":"cbl2 fluent-bit 2.1.10-3 on CBL Mariner 2.0"},{"ProductID":"19759-17086","Value":"cbl2 sqlite 3.39.2-3 on CBL Mariner 2.0"},{"ProductID":"19661-17086","Value":"cbl2 systemd 250.3-22 on CBL Mariner 2.0"},{"ProductID":"19667-17086","Value":"cbl2 systemd-bootstrap 250.3-13 on CBL Mariner 2.0"},{"ProductID":"19687-17084","Value":"azl3 systemd-bootstrap 250.3-18 on Azure Linux 3.0"},{"ProductID":"19692-17084","Value":"azl3 systemd 255-21 on Azure Linux 3.0"},{"ProductID":"22400-17084","Value":"azl3 kernel 6.6.161.1-1 on Azure Linux 3.0"}],"Name":"Open Source Software","Type":1}],"Name":"Microsoft","Type":0}],"FullProductName":[{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.26864:*:*:*:*:*:x64:*","ProductID":"10049","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_R2:6.1.7601.26864:*:*:*:*:*:x64:*","ProductID":"10051","Value":"Windows Server 2008 R2 for x64-based Systems Service Pack 1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22413:*:*:*:*:*:x64:*","ProductID":"10287","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.24614:*:*:*:*:*:x64:*","ProductID":"10378","Value":"Windows Server 2012"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012:6.2.9200.24614:*:*:*:*:*:x64:*","ProductID":"10379","Value":"Windows Server 2012 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.21715:*:*:*:*:*:x64:*","ProductID":"10483","Value":"Windows Server 2012 R2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2012_R2:6.3.9600.21715:*:*:*:*:*:x64:*","ProductID":"10543","Value":"Windows Server 2012 R2 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20345:*:*:*:*:*:x86:*","ProductID":"10729","Value":"Windows 10 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1507:10.0.10240.20345:*:*:*:*:*:x64:*","ProductID":"10735","Value":"Windows 10 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*","ProductID":"10753","Value":"Microsoft Office 2016 (32-bit edition)"},{"CPE":"cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*","ProductID":"10754","Value":"Microsoft Office 2016 (64-bit edition)"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6529:*:*:*:*:*:*:*","ProductID":"10816","Value":"Windows Server 2016"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6529:*:*:*:*:*:x86:*","ProductID":"10852","Value":"Windows 10 Version 1607 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1607:10.0.14393.6529:*:*:*:*:*:x64:*","ProductID":"10853","Value":"Windows 10 Version 1607 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2016:10.0.14393.6529:*:*:*:*:*:*:*","ProductID":"10855","Value":"Windows Server 2016 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5206:*:*:*:*:*:x86:*","ProductID":"11568","Value":"Windows 10 Version 1809 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5206:*:*:*:*:*:x64:*","ProductID":"11569","Value":"Windows 10 Version 1809 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_1809:10.0.17763.5206:*:*:*:*:*:arm64:*","ProductID":"11570","Value":"Windows 10 Version 1809 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.5206:*:*:*:*:*:*:*","ProductID":"11571","Value":"Windows Server 2019"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2019:10.0.17763.5206:*:*:*:*:*:*:*","ProductID":"11572","Value":"Windows Server 2019 (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","ProductID":"11573","Value":"Microsoft Office 2019 for 32-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*","ProductID":"11574","Value":"Microsoft Office 2019 for 64-bit editions"},{"CPE":"cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*","ProductID":"11655","Value":"Microsoft Edge (Chromium-based)"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*","ProductID":"11664","Value":"Microsoft Dynamics 365 (on-premises) version 9.0"},{"CPE":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","ProductID":"11762","Value":"Microsoft 365 Apps for Enterprise for 32-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*","ProductID":"11763","Value":"Microsoft 365 Apps for Enterprise for 64-bit Systems"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365:9.1:*:*:*:on-premises:*:*:*","ProductID":"11921","Value":"Microsoft Dynamics 365 (on-premises) version 9.1"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2159:*:*:*:*:*:*:*","ProductID":"11923","Value":"Windows Server 2022"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2022:10.0.20348.2159:*:*:*:*:*:*:*","ProductID":"11924","Value":"Windows Server 2022 (Server Core installation)"},{"CPE":"cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.2652:*:*:*:*:*:x64:*","ProductID":"11926","Value":"Windows 11 version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_21H2:10.0.22000.2652:*:*:*:*:*:arm64:*","ProductID":"11927","Value":"Windows 11 version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19041.3803:*:*:*:*:*:x86:*","ProductID":"11929","Value":"Windows 10 Version 21H2 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19041.3803:*:*:*:*:*:arm64:*","ProductID":"11930","Value":"Windows 10 Version 21H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_21H2:10.0.19041.3803:*:*:*:*:*:x64:*","ProductID":"11931","Value":"Windows 10 Version 21H2 for x64-based Systems"},{"CPE":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:macos:*:*","ProductID":"11951","Value":"Microsoft Office LTSC for Mac 2021"},{"CPE":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*","ProductID":"11952","Value":"Microsoft Office LTSC 2021 for 64-bit editions"},{"CPE":"cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*","ProductID":"11953","Value":"Microsoft Office LTSC 2021 for 32-bit editions"},{"CPE":"cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.2861:*:*:*:*:*:arm64:*","ProductID":"12085","Value":"Windows 11 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_22H2:10.0.22621.2861:*:*:*:*:*:x64:*","ProductID":"12086","Value":"Windows 11 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3803:*:*:*:*:*:x64:*","ProductID":"12097","Value":"Windows 10 Version 22H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3803:*:*:*:*:*:arm64:*","ProductID":"12098","Value":"Windows 10 Version 22H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_10_22H2:10.0.19045.3803:*:*:*:*:*:x86:*","ProductID":"12099","Value":"Windows 10 Version 22H2 for 32-bit Systems"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:2.0:*:*:*:*:*:*:x64","ProductID":"12139","Value":"CBL Mariner 2.0 x64"},{"CPE":"cpe:2.3:o:microsoft:cbl_mariner:2.0:*:*:*:*:*:*:arm","ProductID":"12140","Value":"CBL Mariner 2.0 ARM"},{"CPE":"cpe:2.3:o:microsoft:azure_devops_server:2020:-:*:*:*:*:*:*","ProductID":"12143","Value":"Azure DevOps Server 2020.1.2"},{"CPE":"cpe:2.3:a:microsoft:malware_protection_platform:*:*:*:*:*:*:*:*","ProductID":"12183","Value":"Microsoft Malware Protection Platform"},{"CPE":"cpe:2.3:a:microsoft:azure_logic_apps:*:*:*:*:*:*:*:*","ProductID":"12228","Value":"Azure Logic Apps"},{"CPE":"cpe:2.3:o:microsoft:windows_11_23H2:10.0.22621.2861:*:*:*:*:*:arm64:*","ProductID":"12242","Value":"Windows 11 Version 23H2 for ARM64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_11_23H2:10.0.22631.2861:*:*:*:*:*:x64:*","ProductID":"12243","Value":"Windows 11 Version 23H2 for x64-based Systems"},{"CPE":"cpe:2.3:o:microsoft:windows_server_23h2:10.0.25398.584:*:*:*:*:*:*:*","ProductID":"12244","Value":"Windows Server 2022, 23H2 Edition (Server Core installation)"},{"CPE":"cpe:2.3:a:microsoft:power_platform:*:*:*:*:*:*:*:*","ProductID":"12263","Value":"Microsoft Power Platform"},{"CPE":"cpe:2.3:a:microsoft:azure_connected_machine_agent:-:*:*:*:*:*:*:*","ProductID":"12264","Value":"Azure Connected Machine Agent"},{"CPE":"cpe:2.3:a:microsoft:azure_machine_learning_sdk:*:*:*:*:*:*:*:*","ProductID":"12266","Value":"Azure Machine Learning SDK"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365:-:*:*:*:*:finance_and_operations:*:*","ProductID":"12267","Value":"Dynamics 365 for Finance and Operations Version 10.0.37 Platform Update 61"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365:-:*:*:*:*:finance_and_operations:*:*","ProductID":"12268","Value":"Dynamics 365 for Finance and Operations Version 10.0.38 Platform Update 62"},{"CPE":"cpe:2.3:a:microsoft:dynamics_365:-:*:*:*:*:finance_and_operations:*:*","ProductID":"12269","Value":"Dynamics 365 for Finance and Operations Platform Update 60"},{"CPE":"cpe:2.3:o:microsoft:azure_devops_server:2022.1:-:*:*:*:*:*:*","ProductID":"12270","Value":"Azure DevOps Server 2022.1"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.153.1-1:*:*:*:*:*:*:*:*","ProductID":"16838-16823","Value":"cbl2 kernel 5.15.153.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libglvnd_1.7.0-2:*:*:*:*:*:*:*:*","ProductID":"16928-17084","Value":"azl3 libglvnd 1.7.0-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.29.1-4:*:*:*:*:*:*:*:*","ProductID":"17062-17084","Value":"azl3 kernel 6.6.29.1-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.35.1-4:*:*:*:*:*:*:*:*","ProductID":"17065-17084","Value":"azl3 kernel 6.6.35.1-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.180.1-1:*:*:*:*:*:*:*:*","ProductID":"17095-17086","Value":"cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_postgresql_14.14-1:*:*:*:*:*:*:*:*","ProductID":"17174-16823","Value":"cbl2 postgresql 14.14-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_rust_1.72.0-10:*:*:*:*:*:*:*:*","ProductID":"17183-17086","Value":"cbl2 rust 1.72.0-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_mysql_8.0.40-1:*:*:*:*:*:*:*:*","ProductID":"17218-16823","Value":"cbl2 mysql 8.0.40-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.21.6-1:*:*:*:*:*:*:*:*","ProductID":"17375-16823","Value":"cbl2 golang 1.21.6-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtbase_5.12.11-15:*:*:*:*:*:*:*:*","ProductID":"17384-17086","Value":"cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_telegraf_1.28.5-5:*:*:*:*:*:*:*:*","ProductID":"17405-17086","Value":"cbl2 telegraf 1.28.5-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_telegraf_1.28.5-5:*:*:*:*:*:*:*:*","ProductID":"17405-21692","Value":"cbl2 telegraf 1.28.5-5 on CBL-Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_moby-compose_2.17.3-5:*:*:*:*:*:*:*:*","ProductID":"17414-16823","Value":"cbl2 moby-compose 2.17.3-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ansible_2.14.12-2:*:*:*:*:*:*:*:*","ProductID":"17445-16823","Value":"cbl2 ansible 2.14.12-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ansible_2.14.12-2:*:*:*:*:*:*:*:*","ProductID":"17445-17086","Value":"cbl2 ansible 2.14.12-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.148.1-1:*:*:*:*:*:*:*:*","ProductID":"17452-16823","Value":"cbl2 kernel 5.15.148.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_jq_1.7.1-2:*:*:*:*:*:*:*:*","ProductID":"17473-17084","Value":"azl3 jq 1.7.1-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mysql_8.0.40-1:*:*:*:*:*:*:*:*","ProductID":"17607-17084","Value":"azl3 mysql 8.0.40-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_nmap_7.95-2:*:*:*:*:*:*:*:*","ProductID":"17642-17084","Value":"azl3 nmap 7.95-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_tensorflow_2.16.1-9:*:*:*:*:*:*:*:*","ProductID":"17667-17084","Value":"azl3 tensorflow 2.16.1-9 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qtbase_6.6.2-1:*:*:*:*:*:*:*:*","ProductID":"17680-17084","Value":"azl3 qtbase 6.6.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python3_3.12.3-1:*:*:*:*:*:*:*:*","ProductID":"17712-17084","Value":"azl3 python3 3.12.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cmake_3.29.6-1:*:*:*:*:*:*:*:*","ProductID":"17734-17084","Value":"azl3 cmake 3.29.6-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_hyperv-daemons_6.6.29.1-1:*:*:*:*:*:*:*:*","ProductID":"17748-17084","Value":"azl3 hyperv-daemons 6.6.29.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubernetes_1.30.1-1:*:*:*:*:*:*:*:*","ProductID":"17753-17084","Value":"azl3 kubernetes 1.30.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cert-manager_1.12.12-1:*:*:*:*:*:*:*:*","ProductID":"17766-17084","Value":"azl3 cert-manager 1.12.12-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_hyperv-daemons_6.6.22.1-2:*:*:*:*:*:*:*:*","ProductID":"17785-17084","Value":"azl3 hyperv-daemons 6.6.22.1-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libcontainers-common_20240213-3:*:*:*:*:*:*:*:*","ProductID":"17793-17084","Value":"azl3 libcontainers-common 20240213-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_docker-buildx_0.14.0-1:*:*:*:*:*:*:*:*","ProductID":"17801-17084","Value":"azl3 docker-buildx 0.14.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cmake_3.28.2-6:*:*:*:*:*:*:*:*","ProductID":"17809-17084","Value":"azl3 cmake 3.28.2-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ansible_2.17.0-1:*:*:*:*:*:*:*:*","ProductID":"17822-17084","Value":"azl3 ansible 2.17.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_hyperv-daemons_5.15.145.2-1:*:*:*:*:*:*:*:*","ProductID":"17828-16823","Value":"cbl2 hyperv-daemons 5.15.145.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_perl_5.34.1-489:*:*:*:*:*:*:*:*","ProductID":"17843-16823","Value":"cbl2 perl 5.34.1-489 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cmake_3.21.4-13:*:*:*:*:*:*:*:*","ProductID":"17956-16823","Value":"cbl2 cmake 3.21.4-13 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qemu_6.2.0-22:*:*:*:*:*:*:*:*","ProductID":"18016-16823","Value":"cbl2 qemu 6.2.0-22 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_packer_1.9.5-1:*:*:*:*:*:*:*:*","ProductID":"18041-17084","Value":"azl3 packer 1.9.5-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_node-problem-detector_0.8.15-4:*:*:*:*:*:*:*:*","ProductID":"18082-17084","Value":"azl3 node-problem-detector 0.8.15-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cf-cli_8.7.3-6:*:*:*:*:*:*:*:*","ProductID":"18085-17084","Value":"azl3 cf-cli 8.7.3-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_packer_1.9.5-3:*:*:*:*:*:*:*:*","ProductID":"18130-16823","Value":"cbl2 packer 1.9.5-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_msft-golang_1.21.5-1:*:*:*:*:*:*:*:*","ProductID":"18145-16823","Value":"cbl2 msft-golang 1.21.5-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.21.5-1:*:*:*:*:*:*:*:*","ProductID":"18146-16823","Value":"cbl2 golang 1.21.5-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_msft-golang_1.22.3-1.:*:*:*:*:*:*:*:*","ProductID":"18147-16823","Value":"cbl2 msft-golang 1.22.3-1. on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_msft-golang_1.20.0-1:*:*:*:*:*:*:*:*","ProductID":"18156-16823","Value":"cbl2 msft-golang 1.20.0-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.20.0-1:*:*:*:*:*:*:*:*","ProductID":"18157-16823","Value":"cbl2 golang 1.20.0-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.20.0-1:*:*:*:*:*:*:*:*","ProductID":"18158-17084","Value":"azl3 golang 1.20.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_telegraf_1.29.4-1:*:*:*:*:*:*:*:*","ProductID":"18163-16823","Value":"cbl2 telegraf 1.29.4-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_telegraf_1.29.4-1:*:*:*:*:*:*:*:*","ProductID":"18164-17084","Value":"azl3 telegraf 1.29.4-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtbase_5.12.11-10:*:*:*:*:*:*:*:*","ProductID":"18179-16823","Value":"cbl2 qt5-qtbase 5.12.11-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_postfix_3.7.0-3:*:*:*:*:*:*:*:*","ProductID":"18197-16823","Value":"cbl2 postfix 3.7.0-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_postfix_3.9.0-1:*:*:*:*:*:*:*:*","ProductID":"18198-17084","Value":"azl3 postfix 3.9.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_moby-engine_20.10.27-1:*:*:*:*:*:*:*:*","ProductID":"18199-16823","Value":"cbl2 moby-engine 20.10.27-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_jsch_0.1.55-2:*:*:*:*:*:*:*:*","ProductID":"18200-16823","Value":"cbl2 jsch 0.1.55-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_terraform_1.3.2-25:*:*:*:*:*:*:*:*","ProductID":"18201-16823","Value":"cbl2 terraform 1.3.2-25 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_moby-cli_20.10.27-2:*:*:*:*:*:*:*:*","ProductID":"18202-16823","Value":"cbl2 moby-cli 20.10.27-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kubevirt_0.59.0-26:*:*:*:*:*:*:*:*","ProductID":"18203-16823","Value":"cbl2 kubevirt 0.59.0-26 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kubernetes_1.28.4-4:*:*:*:*:*:*:*:*","ProductID":"18204-16823","Value":"cbl2 kubernetes 1.28.4-4 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_openssh_8.9p1-4:*:*:*:*:*:*:*:*","ProductID":"18205-16823","Value":"cbl2 openssh 8.9p1-4 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_nmap_7.93-2:*:*:*:*:*:*:*:*","ProductID":"18206-16823","Value":"cbl2 nmap 7.93-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libssh2_1.9.0-4:*:*:*:*:*:*:*:*","ProductID":"18207-16823","Value":"cbl2 libssh2 1.9.0-4 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libssh_0.10.6-1:*:*:*:*:*:*:*:*","ProductID":"18208-16823","Value":"cbl2 libssh 0.10.6-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_erlang_25.2-1:*:*:*:*:*:*:*:*","ProductID":"18209-16823","Value":"cbl2 erlang 25.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cert-manager_1.11.2-7:*:*:*:*:*:*:*:*","ProductID":"18210-16823","Value":"cbl2 cert-manager 1.11.2-7 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_node-problem-detector_0.8.20-2:*:*:*:*:*:*:*:*","ProductID":"18211-17084","Value":"azl3 node-problem-detector 0.8.20-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_nmap_7.93-2:*:*:*:*:*:*:*:*","ProductID":"18212-17084","Value":"azl3 nmap 7.93-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libssh2_1.11.1-1:*:*:*:*:*:*:*:*","ProductID":"18213-17084","Value":"azl3 libssh2 1.11.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libssh_0.10.6-1:*:*:*:*:*:*:*:*","ProductID":"18214-17084","Value":"azl3 libssh 0.10.6-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubevirt_1.2.0-9:*:*:*:*:*:*:*:*","ProductID":"18215-17084","Value":"azl3 kubevirt 1.2.0-9 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_erlang_26.2.3-1:*:*:*:*:*:*:*:*","ProductID":"18216-17084","Value":"azl3 erlang 26.2.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cf-cli_8.7.11-1:*:*:*:*:*:*:*:*","ProductID":"18217-17084","Value":"azl3 cf-cli 8.7.11-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ansible_2.14.11-1:*:*:*:*:*:*:*:*","ProductID":"18218-16823","Value":"cbl2 ansible 2.14.11-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.143.1-1:*:*:*:*:*:*:*:*","ProductID":"18220-16823","Value":"cbl2 kernel 5.15.143.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_shadow-utils_4.9-14:*:*:*:*:*:*:*:*","ProductID":"18221-16823","Value":"cbl2 shadow-utils 4.9-14 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_sudo_1.9.15p5-1:*:*:*:*:*:*:*:*","ProductID":"18222-16823","Value":"cbl2 sudo 1.9.15p5-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_apparmor_3.0.4-3:*:*:*:*:*:*:*:*","ProductID":"18223-16823","Value":"cbl2 apparmor 3.0.4-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_openssh_8.9p1-3:*:*:*:*:*:*:*:*","ProductID":"18224-16823","Value":"cbl2 openssh 8.9p1-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_openssh_9.7p1-1:*:*:*:*:*:*:*:*","ProductID":"18225-17084","Value":"azl3 openssh 9.7p1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_xorg-x11-server_1.20.10-5:*:*:*:*:*:*:*:*","ProductID":"18226-16823","Value":"cbl2 xorg-x11-server 1.20.10-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ncurses_6.4-3:*:*:*:*:*:*:*:*","ProductID":"18227-16823","Value":"cbl2 ncurses 6.4-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_libtiff_4.6.0-6:*:*:*:*:*:*:*:*","ProductID":"18228-16823","Value":"cbl2 libtiff 4.6.0-6 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libtiff_4.6.0-6:*:*:*:*:*:*:*:*","ProductID":"18229-17084","Value":"azl3 libtiff 4.6.0-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.145.2-1:*:*:*:*:*:*:*:*","ProductID":"18230-16823","Value":"cbl2 kernel 5.15.145.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_bluez_5.63-5:*:*:*:*:*:*:*:*","ProductID":"18231-16823","Value":"cbl2 bluez 5.63-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_bluez_5.63-6:*:*:*:*:*:*:*:*","ProductID":"18232-17084","Value":"azl3 bluez 5.63-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qemu_8.2.0-1:*:*:*:*:*:*:*:*","ProductID":"18233-17084","Value":"azl3 qemu 8.2.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_mysql_8.0.35-2:*:*:*:*:*:*:*:*","ProductID":"18234-16823","Value":"cbl2 mysql 8.0.35-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_curl_8.5.0-1:*:*:*:*:*:*:*:*","ProductID":"18235-16823","Value":"cbl2 curl 8.5.0-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_postgresql_14.10-1:*:*:*:*:*:*:*:*","ProductID":"18239-16823","Value":"cbl2 postgresql 14.10-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_fish_3.6.2-1:*:*:*:*:*:*:*:*","ProductID":"18240-16823","Value":"cbl2 fish 3.6.2-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_strongswan_5.9.10-3:*:*:*:*:*:*:*:*","ProductID":"18241-16823","Value":"cbl2 strongswan 5.9.10-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_strongswan_5.9.12-1:*:*:*:*:*:*:*:*","ProductID":"18242-17084","Value":"azl3 strongswan 5.9.12-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_gcc_13.2.0-7:*:*:*:*:*:*:*:*","ProductID":"18315-17084","Value":"azl3 gcc 13.2.0-7 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_systemd_255-20:*:*:*:*:*:*:*:*","ProductID":"18413-17084","Value":"azl3 systemd 255-20 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_espeak-ng_1.52.0-1:*:*:*:*:*:*:*:*","ProductID":"18420-17084","Value":"azl3 espeak-ng 1.52.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_espeak-ng_1.51.1-1:*:*:*:*:*:*:*:*","ProductID":"18421-17084","Value":"azl3 espeak-ng 1.51.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_gcc_11.2.0-8:*:*:*:*:*:*:*:*","ProductID":"18447-17086","Value":"cbl2 gcc 11.2.0-8 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mozjs_102.15.1-1:*:*:*:*:*:*:*:*","ProductID":"18469-17084","Value":"azl3 mozjs 102.15.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qemu_6.2.0-18:*:*:*:*:*:*:*:*","ProductID":"18535-17084","Value":"azl3 qemu 6.2.0-18 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtsvg_5.12.11-6:*:*:*:*:*:*:*:*","ProductID":"19089-17086","Value":"cbl2 qt5-qtsvg 5.12.11-6 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_postgresql_16.7-1:*:*:*:*:*:*:*:*","ProductID":"19262-17084","Value":"azl3 postgresql 16.7-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubevirt_1.2.0-17:*:*:*:*:*:*:*:*","ProductID":"19339-17084","Value":"azl3 kubevirt 1.2.0-17 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_openssh_9.8p1-4:*:*:*:*:*:*:*:*","ProductID":"19453-17084","Value":"azl3 openssh 9.8p1-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.92.2-1:*:*:*:*:*:*:*:*","ProductID":"19529-17084","Value":"azl3 kernel 6.6.92.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_erlang_26.2.5.12-1:*:*:*:*:*:*:*:*","ProductID":"19605-17084","Value":"azl3 erlang 26.2.5.12-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_systemd_250.3-22:*:*:*:*:*:*:*:*","ProductID":"19661-17086","Value":"cbl2 systemd 250.3-22 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_telegraf_1.27.3-4:*:*:*:*:*:*:*:*","ProductID":"19664-17084","Value":"azl3 telegraf 1.27.3-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ceph_18.2.2-8:*:*:*:*:*:*:*:*","ProductID":"19666-17084","Value":"azl3 ceph 18.2.2-8 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_systemd-bootstrap_250.3-13:*:*:*:*:*:*:*:*","ProductID":"19667-17086","Value":"cbl2 systemd-bootstrap 250.3-13 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_tensorflow_2.11.1-2:*:*:*:*:*:*:*:*","ProductID":"19668-17086","Value":"cbl2 tensorflow 2.11.1-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.75.0-14:*:*:*:*:*:*:*:*","ProductID":"19671-17084","Value":"azl3 rust 1.75.0-14 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_kernel_5.15.180.1-1:*:*:*:*:*:*:*:*","ProductID":"19673-17086","Value":"cbl2 kernel 5.15.180.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.23.9-1:*:*:*:*:*:*:*:*","ProductID":"19679-17084","Value":"azl3 golang 1.23.9-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.96.2-1:*:*:*:*:*:*:*:*","ProductID":"19683-17084","Value":"azl3 kernel 6.6.96.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_rust_1.86.0-1:*:*:*:*:*:*:*:*","ProductID":"19686-17084","Value":"azl3 rust 1.86.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_systemd-bootstrap_250.3-18:*:*:*:*:*:*:*:*","ProductID":"19687-17084","Value":"azl3 systemd-bootstrap 250.3-18 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_mysql_8.0.36-1:*:*:*:*:*:*:*:*","ProductID":"19690-17084","Value":"azl3 mysql 8.0.36-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_pytorch_2.5.1-1:*:*:*:*:*:*:*:*","ProductID":"19691-17086","Value":"cbl2 pytorch 2.5.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_systemd_255-21:*:*:*:*:*:*:*:*","ProductID":"19692-17084","Value":"azl3 systemd 255-21 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python-tensorboard_2.16.2-6:*:*:*:*:*:*:*:*","ProductID":"19693-17084","Value":"azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.24.3-1:*:*:*:*:*:*:*:*","ProductID":"19697-17084","Value":"azl3 golang 1.24.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_fluent-bit_2.1.10-3:*:*:*:*:*:*:*:*","ProductID":"19701-17086","Value":"cbl2 fluent-bit 2.1.10-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_ansible_2.14.12-2:*:*:*:*:*:*:*:*","ProductID":"19710-17086","Value":"cbl2 ansible 2.14.12-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_python-tensorboard_2.11.0-3:*:*:*:*:*:*:*:*","ProductID":"19712-17086","Value":"cbl2 python-tensorboard 2.11.0-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ansible_2.15.3-1:*:*:*:*:*:*:*:*","ProductID":"19716-17084","Value":"azl3 ansible 2.15.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_gcc_11.2.0-8:*:*:*:*:*:*:*:*","ProductID":"19718-17086","Value":"cbl2 gcc 11.2.0-8 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_rust_1.72.0-10:*:*:*:*:*:*:*:*","ProductID":"19721-17086","Value":"cbl2 rust 1.72.0-10 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtsvg_5.12.11-6:*:*:*:*:*:*:*:*","ProductID":"19727-17086","Value":"cbl2 qt5-qtsvg 5.12.11-6 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_qt5-qtbase_5.12.11-15:*:*:*:*:*:*:*:*","ProductID":"19737-17086","Value":"cbl2 qt5-qtbase 5.12.11-15 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_qtbase_6.6.1-1:*:*:*:*:*:*:*:*","ProductID":"19741-17084","Value":"azl3 qtbase 6.6.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_postfix_3.7.4-1:*:*:*:*:*:*:*:*","ProductID":"19749-17086","Value":"cbl2 postfix 3.7.4-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_postfix_3.7.0-2:*:*:*:*:*:*:*:*","ProductID":"19753-17084","Value":"azl3 postfix 3.7.0-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_sqlite_3.39.2-3:*:*:*:*:*:*:*:*","ProductID":"19759-17086","Value":"cbl2 sqlite 3.39.2-3 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.23.8-1:*:*:*:*:*:*:*:*","ProductID":"19762-17084","Value":"azl3 golang 1.23.8-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.17.13-2:*:*:*:*:*:*:*:*","ProductID":"19778-17086","Value":"cbl2 golang 1.17.13-2 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_golang_1.18.8-7:*:*:*:*:*:*:*:*","ProductID":"19785-17086","Value":"cbl2 golang 1.18.8-7 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_docker-buildx_0.12.1-1:*:*:*:*:*:*:*:*","ProductID":"19808-17084","Value":"azl3 docker-buildx 0.12.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_cert-manager_1.11.2-22:*:*:*:*:*:*:*:*","ProductID":"19817-17086","Value":"cbl2 cert-manager 1.11.2-22 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_ncurses_6.4-2:*:*:*:*:*:*:*:*","ProductID":"19855-17084","Value":"azl3 ncurses 6.4-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_cert-manager_1.11.2-8:*:*:*:*:*:*:*:*","ProductID":"19863-17084","Value":"azl3 cert-manager 1.11.2-8 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_hyperv-daemons_5.15.139.1-1:*:*:*:*:*:*:*:*","ProductID":"19874-17086","Value":"cbl2 hyperv-daemons 5.15.139.1-1 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_openssh_9.5p1-2:*:*:*:*:*:*:*:*","ProductID":"19897-17084","Value":"azl3 openssh 9.5p1-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_perl_5.34.1-490:*:*:*:*:*:*:*:*","ProductID":"19954-17086","Value":"cbl2 perl 5.34.1-490 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_packer_1.9.4-1:*:*:*:*:*:*:*:*","ProductID":"19962-17084","Value":"azl3 packer 1.9.4-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_python3_3.12.0-4:*:*:*:*:*:*:*:*","ProductID":"19964-17084","Value":"azl3 python3 3.12.0-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kubernetes_1.29.1-4:*:*:*:*:*:*:*:*","ProductID":"19986-17084","Value":"azl3 kubernetes 1.29.1-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:cbl2_telegraf_1.28.5-5:*:*:*:*:*:*:*:*","ProductID":"20013-17086","Value":"cbl2 telegraf 1.28.5-5 on CBL Mariner 2.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_libssh_0.10.5-2:*:*:*:*:*:*:*:*","ProductID":"20073-17084","Value":"azl3 libssh 0.10.5-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_strongswan_5.9.11-1:*:*:*:*:*:*:*:*","ProductID":"20127-17084","Value":"azl3 strongswan 5.9.11-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.96.2-2:*:*:*:*:*:*:*:*","ProductID":"20412-17084","Value":"azl3 kernel 6.6.96.2-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_apparmor_3.1.7-1:*:*:*:*:*:*:*:*","ProductID":"20442-17084","Value":"azl3 apparmor 3.1.7-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.104.2-4:*:*:*:*:*:*:*:*","ProductID":"20553-17084","Value":"azl3 kernel 6.6.104.2-4 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.112.1-2:*:*:*:*:*:*:*:*","ProductID":"20613-17084","Value":"azl3 kernel 6.6.112.1-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.117.1-1:*:*:*:*:*:*:*:*","ProductID":"20725-17084","Value":"azl3 kernel 6.6.117.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.119.3-1:*:*:*:*:*:*:*:*","ProductID":"20788-17084","Value":"azl3 kernel 6.6.119.3-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.119.3-3:*:*:*:*:*:*:*:*","ProductID":"20823-17084","Value":"azl3 kernel 6.6.119.3-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.121.1-1:*:*:*:*:*:*:*:*","ProductID":"20860-17084","Value":"azl3 kernel 6.6.121.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.126.1-1:*:*:*:*:*:*:*:*","ProductID":"20956-17084","Value":"azl3 kernel 6.6.126.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.130.1-3:*:*:*:*:*:*:*:*","ProductID":"21094-17084","Value":"azl3 kernel 6.6.130.1-3 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.134.1-2:*:*:*:*:*:*:*:*","ProductID":"21248-17084","Value":"azl3 kernel 6.6.134.1-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.137.1-2:*:*:*:*:*:*:*:*","ProductID":"21308-17084","Value":"azl3 kernel 6.6.137.1-2 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.138.1-1:*:*:*:*:*:*:*:*","ProductID":"21332-17084","Value":"azl3 kernel 6.6.138.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.139.1-1:*:*:*:*:*:*:*:*","ProductID":"21344-17084","Value":"azl3 kernel 6.6.139.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.141.1-1:*:*:*:*:*:*:*:*","ProductID":"21443-17084","Value":"azl3 kernel 6.6.141.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.143.1-1:*:*:*:*:*:*:*:*","ProductID":"21474-17084","Value":"azl3 kernel 6.6.143.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.144.1-1:*:*:*:*:*:*:*:*","ProductID":"21580-17084","Value":"azl3 kernel 6.6.144.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.145.2-1:*:*:*:*:*:*:*:*","ProductID":"21626-17084","Value":"azl3 kernel 6.6.145.2-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.150.1-1:*:*:*:*:*:*:*:*","ProductID":"21684-17084","Value":"azl3 kernel 6.6.150.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.0-1:*:*:*:*:*:*:*:*","ProductID":"21778-17084","Value":"azl3 golang 1.27.0-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_golang_1.27.1-1:*:*:*:*:*:*:*:*","ProductID":"21809-17084","Value":"azl3 golang 1.27.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.152.1-1:*:*:*:*:*:*:*:*","ProductID":"21892-17084","Value":"azl3 kernel 6.6.152.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.157.1-1:*:*:*:*:*:*:*:*","ProductID":"21932-17084","Value":"azl3 kernel 6.6.157.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.159.1-1:*:*:*:*:*:*:*:*","ProductID":"22276-17084","Value":"azl3 kernel 6.6.159.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:a:microsoft:azl3_kernel_6.6.161.1-1:*:*:*:*:*:*:*:*","ProductID":"22400-17084","Value":"azl3 kernel 6.6.161.1-1 on Azure Linux 3.0"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22413:*:*:*:*:*:x64:*","ProductID":"9312","Value":"Windows Server 2008 for 32-bit Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22413:*:*:*:*:*:x86:*","ProductID":"9318","Value":"Windows Server 2008 for x64-based Systems Service Pack 2"},{"CPE":"cpe:2.3:o:microsoft:windows_server_2008_sp2:6.0.6003.22413:*:*:*:*:*:x86:*","ProductID":"9344","Value":"Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)"}]},"Vulnerability":[{"Acknowledgments":[],"CVE":"CVE-2023-2861","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18016-16823"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18233-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":6.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18535-17084"],"TemporalScore":6.0,"Vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"}],"CWE":[{"ID":"CWE-284","Value":"Improper Access Control"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"fedora","Type":8,"Value":"fedora"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"0","ProductStatuses":[{"ProductID":["18016-16823","18233-17084","18535-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.2.0-22","ProductID":["18016-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18016-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.2.0-1","ProductID":["18233-17084","18535-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18233-17084","18535-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-04-11T00:00:00","Description":{"Value":"<p>Added qemu to CBL-Mariner 2.0\nAdded qemu to Azure Linux 3.0</p>\n"},"Number":"1.1"},{"Date":"2026-02-18T01:44:19","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18016-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18233-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18535-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18016-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18233-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18535-17084"],"Type":3}],"Title":{"Value":"Qemu: 9pfs: improper access control on special files"}},{"Acknowledgments":[],"CVE":"CVE-2023-39326","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19785-17086"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19778-17086"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17375-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18145-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18146-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Go","Type":8,"Value":"Go"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"1","ProductStatuses":[{"ProductID":["19785-17086","19778-17086","17375-16823","18145-16823","18146-16823","21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19785-17086","19778-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19785-17086","19778-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.6-1","ProductID":["17375-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17375-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.5-1","ProductID":["18145-16823","18146-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18145-16823","18146-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2026-10-21T18:38:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.0"},{"Date":"2025-09-03T23:35:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T03:09:08","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-09-07T01:53:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-09-03T01:15:27","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-09T15:03:32","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"},{"Date":"2026-09-17T01:47:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19785-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19778-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17375-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18145-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18146-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19785-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19778-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17375-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18145-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18146-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"Denial of service via chunk extensions in net/http"}},{"Acknowledgments":[],"CVE":"CVE-2023-41913","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20127-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18241-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18242-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"2","ProductStatuses":[{"ProductID":["20127-17084","18241-16823","18242-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.9.12-1","ProductID":["20127-17084","18242-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20127-17084","18242-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.9.10-3","ProductID":["18241-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18241-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:06:21","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2023-12-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20127-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18241-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18242-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["20127-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18241-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18242-17084"],"Type":3}],"Title":{"Value":"strongSwan before 5.9.12 has a buffer overflow and possible unauthenticated remote code execution via a DH public value that exceeds the internal buffer in charon-tkm's DH proxy. The earliest affected version is 5.3.0. An attack can occur via a crafted IKE_SA_INIT message."}},{"Acknowledgments":[],"CVE":"CVE-2023-42465","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18222-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"3","ProductStatuses":[{"ProductID":["18222-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.9.15p5-1","ProductID":["18222-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18222-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18222-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18222-16823"],"Type":3}],"Title":{"Value":"Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value) and because the values do not resist flips of a single bit."}},{"Acknowledgments":[],"CVE":"CVE-2023-45285","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17375-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18147-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19785-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19778-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Go","Type":8,"Value":"Go"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"4","ProductStatuses":[{"ProductID":["17375-16823","18147-16823","19785-17086","19778-17086","21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.6-1","ProductID":["17375-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17375-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.22.3-1.","ProductID":["18147-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18147-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19785-17086","19778-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19785-17086","19778-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2026-10-21T18:40:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2026-09-07T01:51:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-17T01:55:37","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"},{"Date":"2025-09-04T01:31:42","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:51:57","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-09-03T01:12:15","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-09-09T14:58:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17375-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18147-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19785-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19778-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17375-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18147-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19785-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19778-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"Command 'go get' may unexpectedly fallback to insecure git in cmd/go"}},{"Acknowledgments":[],"CVE":"CVE-2023-45287","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19778-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17375-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18156-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18157-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18158-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19785-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21778-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-203","Value":"Observable Discrepancy"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Go","Type":8,"Value":"Go"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"5","ProductStatuses":[{"ProductID":["19778-17086","17375-16823","18156-16823","18157-16823","18158-17084","19785-17086","21778-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19778-17086","19785-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19778-17086","19785-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.6-1","ProductID":["17375-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17375-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.20.0-1","ProductID":["18156-16823","18157-16823","18158-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18156-16823","18157-16823","18158-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21778-17084"],"Type":3}],"RevisionHistory":[{"Date":"2026-10-21T18:40:38","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.0"},{"Date":"2025-09-03T21:28:14","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:50:19","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-08-17T21:29:49","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-09-17T01:48:26","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.0"},{"Date":"2026-09-03T01:04:03","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-09-05T01:48:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"},{"Date":"2026-09-09T14:45:54","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19778-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17375-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18156-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18157-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18158-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19785-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21778-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19778-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17375-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18156-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18157-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18158-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19785-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21778-17084"],"Type":3}],"Title":{"Value":"Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel"}},{"Acknowledgments":[],"CVE":"CVE-2023-45866","CVSSScoreSets":[{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18231-16823"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18232-17084"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-287","Value":"Improper Authentication"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"6","ProductStatuses":[{"ProductID":["18231-16823","18232-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.63-5","ProductID":["18231-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18231-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.63-6","ProductID":["18232-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18232-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-11-09T00:00:00","Description":{"Value":"<p>Added bluez to Azure Linux 3.0\nAdded bluez to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2023-12-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18231-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18232-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18231-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18232-17084"],"Type":3}],"Title":{"Value":"Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection and accept HID keyboard reports potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such access. An example affected package is bluez 5.64-0ubuntu1 in Ubuntu 22.04LTS. NOTE: in some cases a CVE-2020-0556 mitigation would have already addressed this Bluetooth HID Hosts issue."}},{"Acknowledgments":[],"CVE":"CVE-2023-46218","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18234-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17956-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18235-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17607-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17734-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17809-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19690-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"hackerone","Type":8,"Value":"hackerone"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"7","ProductStatuses":[{"ProductID":["18234-16823","17956-16823","18235-16823","17607-17084","17734-17084","17809-17084","19690-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.0.35-2","ProductID":["18234-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18234-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.21.4-13","ProductID":["17956-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17956-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.5.0-1","ProductID":["18235-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18235-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.0.40-1","ProductID":["17607-17084","19690-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17607-17084","19690-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.29.6-1","ProductID":["17734-17084","17809-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17734-17084","17809-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-11-09T00:00:00","Description":{"Value":"<p>Added mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded curl to CBL-Mariner 2.0\nAdded mysql to CBL-Mariner 2.0</p>\n"},"Number":"2.4"},{"Date":"2024-12-04T00:00:00","Description":{"Value":"<p>Added mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded cmake to CBL-Mariner 2.0\nAdded curl to CBL-Mariner 2.0\nAdded mysql to CBL-Mariner 2.0</p>\n"},"Number":"2.6"},{"Date":"2026-02-18T01:25:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2026-08-17T21:19:15","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2023-12-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-12-12T00:00:00","Description":{"Value":"<p>Added mysql to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-10-25T00:00:00","Description":{"Value":"<p>Added mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded curl to CBL-Mariner 2.0\nAdded mysql to CBL-Mariner 2.0</p>\n"},"Number":"2.3"},{"Date":"2024-11-20T00:00:00","Description":{"Value":"<p>Added cmake to CBL-Mariner 2.0\nAdded curl to CBL-Mariner 2.0\nAdded mysql to CBL-Mariner 2.0\nAdded mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0</p>\n"},"Number":"2.5"},{"Date":"2026-08-17T21:19:12","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18234-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17956-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18235-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17607-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17734-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17809-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19690-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18234-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17956-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18235-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17607-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17734-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17809-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19690-17084"],"Type":3}],"Title":{"Value":"This flaw allows a malicious HTTP server to set \"super cookies\" in curl that\nare then passed back to more origins than what is otherwise allowed or\npossible. This allows a site to set cookies that then would get sent to\ndifferent and unrelated sites and domains.\n\nIt could do this by exploiting a mixed case flaw in curl's function that\nverifies a given cookie domain against the Public Suffix List (PSL). For\nexample a cookie could be set with `domain=co.UK` when the URL used a lower\ncase hostname `curl.co.uk` even though `co.uk` is listed as a PSL domain.\n"}},{"Acknowledgments":[],"CVE":"CVE-2023-46219","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19690-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17218-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18235-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17734-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17607-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17809-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"CWE":[{"ID":"CWE-311","Value":"Missing Encryption of Sensitive Data"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"hackerone","Type":8,"Value":"hackerone"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"8","ProductStatuses":[{"ProductID":["19690-17084","17218-16823","18235-16823","17734-17084","17607-17084","17809-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.0.40-1","ProductID":["19690-17084","17218-16823","17607-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19690-17084","17218-16823","17607-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.5.0-1","ProductID":["18235-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18235-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.29.6-1","ProductID":["17734-17084","17809-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17734-17084","17809-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-11-09T00:00:00","Description":{"Value":"<p>Added mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded mysql to CBL-Mariner 2.0\nAdded curl to CBL-Mariner 2.0</p>\n"},"Number":"2.4"},{"Date":"2026-02-18T03:12:39","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2023-12-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-10-23T00:00:00","Description":{"Value":"<p>Added mysql to CBL-Mariner 2.0\nAdded curl to CBL-Mariner 2.0\nAdded cmake to Azure Linux 3.0</p>\n"},"Number":"2.2"},{"Date":"2024-10-25T00:00:00","Description":{"Value":"<p>Added mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded mysql to CBL-Mariner 2.0\nAdded curl to CBL-Mariner 2.0</p>\n"},"Number":"2.3"},{"Date":"2024-12-04T00:00:00","Description":{"Value":"<p>Added mysql to Azure Linux 3.0\nAdded cmake to Azure Linux 3.0\nAdded mysql to CBL-Mariner 2.0\nAdded curl to CBL-Mariner 2.0</p>\n"},"Number":"2.5"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19690-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17218-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18235-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17734-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17607-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17809-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19690-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17218-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18235-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17734-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17607-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17809-17084"],"Type":3}],"Title":{"Value":"When saving HSTS data to an excessively long file name curl could end up\nremoving all contents making subsequent requests using that file unaware of\nthe HSTS status they should otherwise use.\n"}},{"Acknowledgments":[],"CVE":"CVE-2023-4641","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18221-16823"],"TemporalScore":4.7,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-303","Value":"Incorrect Implementation of Authentication Algorithm"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"9","ProductStatuses":[{"ProductID":["18221-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.9-14","ProductID":["18221-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18221-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18221-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18221-16823"],"Type":3}],"Title":{"Value":"Shadow-utils: possible password leak during passwd(1) change"}},{"Acknowledgments":[],"CVE":"CVE-2023-47038","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19954-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"10","ProductStatuses":[{"ProductID":["19954-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19954-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19954-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T20:39:17","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:33:29","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19954-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19954-17086"],"Type":3}],"Title":{"Value":"Perl: write past buffer end via illegal user-defined unicode property"}},{"Acknowledgments":[],"CVE":"CVE-2023-47100","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19954-17086"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17843-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-755","Value":"Improper Handling of Exceptional Conditions"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"11","ProductStatuses":[{"ProductID":["19954-17086","17843-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.34.1-489","ProductID":["19954-17086","17843-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19954-17086","17843-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T22:27:01","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:19:21","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19954-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17843-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["19954-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["17843-16823"],"Type":3}],"Title":{"Value":"In Perl before 5.38.2, S_parse_uniprop_string in regcomp.c can write to unallocated space because a property name associated with a \\p{...} regular expression construct is mishandled. The earliest affected version is 5.30.0."}},{"Acknowledgments":[],"CVE":"CVE-2023-48795","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18085-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19339-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20073-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18199-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18200-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18201-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18130-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17414-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18202-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18203-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18204-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18205-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18206-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18207-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18208-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18209-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18210-16823"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18211-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17801-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18041-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18212-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18213-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18214-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18215-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17753-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18216-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18217-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17766-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19863-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19605-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19986-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19453-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19962-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19808-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18082-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-354","Value":"Improper Validation of Integrity Check Value"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"12","ProductStatuses":[{"ProductID":["18085-17084","19339-17084","20073-17084","18199-16823","18200-16823","18201-16823","18130-16823","17414-16823","18202-16823","18203-16823","18204-16823","18205-16823","18206-16823","18207-16823","18208-16823","18209-16823","18210-16823","18211-17084","17801-17084","18041-17084","18212-17084","18213-17084","18214-17084","18215-17084","17753-17084","18216-17084","18217-17084","17766-17084","19863-17084","19605-17084","19986-17084","19453-17084","19962-17084","19808-17084","18082-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.7.11-1","ProductID":["18085-17084","18217-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18085-17084","18217-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.2.0-9","ProductID":["19339-17084","18215-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19339-17084","18215-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.10.6-1","ProductID":["20073-17084","18208-16823","18214-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20073-17084","18208-16823","18214-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"20.10.27-1","ProductID":["18199-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18199-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.1.55-2","ProductID":["18200-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18200-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.3.2-25","ProductID":["18201-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18201-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.9.5-3","ProductID":["18130-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18130-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.17.3-5","ProductID":["17414-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17414-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"20.10.27-2","ProductID":["18202-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18202-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.59.0-26","ProductID":["18203-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18203-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.28.4-4","ProductID":["18204-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18204-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.9p1-4","ProductID":["18205-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18205-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"7.93-2","ProductID":["18206-16823","18212-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18206-16823","18212-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.9.0-4","ProductID":["18207-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18207-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"25.2-1","ProductID":["18209-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18209-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.11.2-7","ProductID":["18210-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18210-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.8.20-2","ProductID":["18211-17084","18082-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18211-17084","18082-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.14.0-1","ProductID":["17801-17084","19808-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17801-17084","19808-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.9.5-1","ProductID":["18041-17084","19962-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18041-17084","19962-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.11.1-1","ProductID":["18213-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18213-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.30.1-1","ProductID":["17753-17084","19986-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17753-17084","19986-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"26.2.3-1","ProductID":["18216-17084","19605-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18216-17084","19605-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.12.12-1","ProductID":["17766-17084","19863-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17766-17084","19863-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19453-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19453-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-08-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2024-11-09T00:00:00","Description":{"Value":"<p>Added kubevirt to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded packer to Azure Linux 3.0\nAdded kubernetes to Azure Linux 3.0\nAdded docker-buildx to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded moby-compose to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded kubernetes to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded erlang to CBL-Mariner 2.0\nAdded libssh2 to CBL-Mariner 2.0\nAdded moby-cli to CBL-Mariner 2.0\nAdded openssh to CBL-Mariner 2.0\nAdded libssh to CBL-Mariner 2.0</p>\n"},"Number":"2.9"},{"Date":"2025-03-13T00:00:00","Description":{"Value":"<p>Added cf-cli to Azure Linux 3.0\nAdded node-problem-detector to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded packer to Azure Linux 3.0\nAdded kubernetes to Azure Linux 3.0\nAdded docker-buildx to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded moby-compose to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded kubernetes to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded erlang to CBL-Mariner 2.0\nAdded libssh2 to CBL-Mariner 2.0\nAdded moby-cli to CBL-Mariner 2.0\nAdded openssh to CBL-Mariner 2.0\nAdded libssh to CBL-Mariner 2.0</p>\n"},"Number":"3.0"},{"Date":"2026-08-12T23:21:24","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2023-12-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-12-27T00:00:00","Description":{"Value":"<p>Added moby-cli to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2024-08-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.4"},{"Date":"2024-08-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.5"},{"Date":"2024-08-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.6"},{"Date":"2024-08-28T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.7"},{"Date":"2024-08-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.8"},{"Date":"2024-08-30T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.9"},{"Date":"2024-08-31T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-09-01T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.1"},{"Date":"2024-09-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.2"},{"Date":"2024-09-03T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.3"},{"Date":"2024-09-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.4"},{"Date":"2024-09-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.5"},{"Date":"2024-09-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.6"},{"Date":"2024-09-08T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.7"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.8"},{"Date":"2025-03-27T00:00:00","Description":{"Value":"<p>Added libssh to Azure Linux 3.0\nAdded cf-cli to Azure Linux 3.0\nAdded node-problem-detector to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded packer to Azure Linux 3.0\nAdded kubernetes to Azure Linux 3.0\nAdded docker-buildx to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded moby-compose to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded kubernetes to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded erlang to CBL-Mariner 2.0\nAdded libssh2 to CBL-Mariner 2.0\nAdded moby-cli to CBL-Mariner 2.0\nAdded openssh to CBL-Mariner 2.0\nAdded libssh to CBL-Mariner 2.0</p>\n"},"Number":"3.1"},{"Date":"2025-04-08T00:00:00","Description":{"Value":"<p>Added kubevirt to CBL-Mariner 2.0\nAdded terraform to CBL-Mariner 2.0\nAdded moby-compose to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded kubernetes to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded erlang to CBL-Mariner 2.0\nAdded libssh2 to CBL-Mariner 2.0\nAdded moby-cli to CBL-Mariner 2.0\nAdded openssh to CBL-Mariner 2.0\nAdded libssh to CBL-Mariner 2.0\nAdded libssh to Azure Linux 3.0\nAdded cf-cli to Azure Linux 3.0\nAdded node-problem-detector to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded packer to Azure Linux 3.0\nAdded kubernetes to Azure Linux 3.0\nAdded docker-buildx to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0</p>\n"},"Number":"3.2"},{"Date":"2025-04-12T00:00:00","Description":{"Value":"<p>Added libssh2 to Azure Linux 3.0\nAdded libssh to Azure Linux 3.0\nAdded cf-cli to Azure Linux 3.0\nAdded node-problem-detector to Azure Linux 3.0\nAdded kubevirt to Azure Linux 3.0\nAdded cert-manager to Azure Linux 3.0\nAdded packer to Azure Linux 3.0\nAdded kubernetes to Azure Linux 3.0\nAdded docker-buildx to Azure Linux 3.0\nAdded telegraf to Azure Linux 3.0\nAdded kubevirt to CBL-Mariner 2.0\nAdded terraform to CBL-Mariner 2.0\nAdded moby-compose to CBL-Mariner 2.0\nAdded packer to CBL-Mariner 2.0\nAdded kubernetes to CBL-Mariner 2.0\nAdded telegraf to CBL-Mariner 2.0\nAdded cert-manager to CBL-Mariner 2.0\nAdded erlang to CBL-Mariner 2.0\nAdded libssh2 to CBL-Mariner 2.0\nAdded moby-cli to CBL-Mariner 2.0\nAdded openssh to CBL-Mariner 2.0\nAdded libssh to CBL-Mariner 2.0</p>\n"},"Number":"3.3"},{"Date":"2026-02-18T15:07:55","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.4"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18085-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19339-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20073-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18199-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18200-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18201-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18130-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17414-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18202-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18203-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18204-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18205-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18206-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18207-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18208-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18209-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18210-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18211-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17801-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18041-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18212-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18213-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18214-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18215-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17753-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18216-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18217-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17766-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19863-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19605-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19986-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19453-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19962-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19808-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18082-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18085-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19339-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["20073-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18199-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18200-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18201-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18130-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17414-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18202-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18203-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18204-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18205-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18206-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18207-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18208-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18209-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18210-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18211-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17801-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18041-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18212-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18213-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18214-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18215-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17753-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18216-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18217-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17766-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19863-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19605-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19986-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19453-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19962-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19808-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18082-17084"],"Type":3}],"Title":{"Value":"The SSH transport protocol with certain OpenSSH extensions found in OpenSSH before 9.6 and other products allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message) and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP) implemented by these extensions mishandles the handshake phase and mishandles use of sequence numbers. For example there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT Dropbear through 2022.83 Ssh before 5.1.1 in Erlang/OTP PuTTY before 0.80 AsyncSSH before 2.14.2 golang.org/x/crypto before 0.17.0 libssh before 0.10.6 libssh2 "}},{"Acknowledgments":[],"CVE":"CVE-2023-49284","CVSSScoreSets":[{"BaseScore":6.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18240-16823"],"TemporalScore":6.6,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H"}],"CWE":[{"ID":"CWE-436","Value":"Interpretation Conflict"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"GitHub_M","Type":8,"Value":"GitHub_M"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"13","ProductStatuses":[{"ProductID":["18240-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.6.2-1","ProductID":["18240-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18240-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-09T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18240-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18240-16823"],"Type":3}],"Title":{"Value":"Command substitution output can trigger shell expansion in fish shell"}},{"Acknowledgments":[],"CVE":"CVE-2023-49292","CVSSScoreSets":[{"BaseScore":4.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19778-17086"],"TemporalScore":4.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"BaseScore":4.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19785-17086"],"TemporalScore":4.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"BaseScore":4.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17375-16823"],"TemporalScore":4.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N"},{"BaseScore":4.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19697-17084"],"TemporalScore":4.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-200","Value":"Exposure of Sensitive Information to an Unauthorized Actor"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"GitHub_M","Type":8,"Value":"GitHub_M"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"14","ProductStatuses":[{"ProductID":["19778-17086","19785-17086","17375-16823","19697-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19778-17086","19785-17086","19697-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19778-17086","19785-17086","19697-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.21.6-1","ProductID":["17375-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17375-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T03:11:09","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-09-09T01:56:29","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2025-09-04T04:54:22","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-09-03T01:09:11","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19778-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19785-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17375-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19697-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19778-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19785-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17375-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19697-17084"],"Type":3}],"Title":{"Value":"Possible private key restoration in go package github.com/ecies/go"}},{"Acknowledgments":[],"CVE":"CVE-2023-49355","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17473-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"15","ProductStatuses":[{"ProductID":["17473-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["17473-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17473-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T19:53:30","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-19T01:05:26","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17473-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17473-17084"],"Type":3}],"Title":{"Value":"decToString in decNumber/decNumber.c in jq 88f01a7 has a one-byte out-of-bounds write via the \" []-1.2e-1111111111\" input. NOTE: this is not the same as CVE-2023-50246. The CVE-2023-50246 71c2ab5 reference mentions -10E-1000010001, which is not in normalized scientific notation."}},{"Acknowledgments":[],"CVE":"CVE-2023-49990","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18421-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"16","ProductStatuses":[{"ProductID":["18421-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.51.1-1","ProductID":["18421-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18421-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18421-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18421-17084"],"Type":3}],"Title":{"Value":"Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-49991","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18420-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18421-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"17","ProductStatuses":[{"ProductID":["18420-17084","18421-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.52.0-1","ProductID":["18420-17084","18421-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18420-17084","18421-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:03:17","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18420-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18421-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18420-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18421-17084"],"Type":3}],"Title":{"Value":"Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-49992","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18420-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18421-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"18","ProductStatuses":[{"ProductID":["18420-17084","18421-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.52.0-1","ProductID":["18420-17084","18421-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18420-17084","18421-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:05:24","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18420-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18421-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18420-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18421-17084"],"Type":3}],"Title":{"Value":"Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-49993","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18421-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18420-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-120","Value":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"19","ProductStatuses":[{"ProductID":["18421-17084","18420-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.52.0-1","ProductID":["18421-17084","18420-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18421-17084","18420-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:06:30","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18421-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18420-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18421-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18420-17084"],"Type":3}],"Title":{"Value":"Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow"}},{"Acknowledgments":[],"CVE":"CVE-2023-49994","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18421-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18420-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-697","Value":"Incorrect Comparison"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"20","ProductStatuses":[{"ProductID":["18421-17084","18420-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.52.0-1","ProductID":["18421-17084","18420-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18421-17084","18420-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:04:21","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18421-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18420-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18421-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18420-17084"],"Type":3}],"Title":{"Value":"Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-50431","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16838-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19529-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"21","ProductStatuses":[{"ProductID":["16838-16823","19529-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.153.1-1","ProductID":["16838-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16838-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.6.92.2-1","ProductID":["19529-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19529-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-08-12T23:10:21","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16838-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19529-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16838-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19529-17084"],"Type":3}],"Title":{"Value":"sec_attest_info in drivers/accel/habanalabs/common/habanalabs_ioctl.c in the Linux kernel through 6.6.5 allows an information leak to user space because info->pad0 is not initialized."}},{"Acknowledgments":[],"CVE":"CVE-2023-50471","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18223-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20442-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"22","ProductStatuses":[{"ProductID":["18223-16823","20442-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.0.4-3","ProductID":["18223-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18223-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.1.7-1","ProductID":["20442-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20442-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-08-12T21:44:49","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2023-12-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-19T01:16:58","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18223-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20442-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18223-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20442-17084"],"Type":3}],"Title":{"Value":"cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_InsertItemInArray at cJSON.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-50472","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18223-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20442-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"23","ProductStatuses":[{"ProductID":["18223-16823","20442-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.0.4-3","ProductID":["18223-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18223-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.1.7-1","ProductID":["20442-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20442-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-08-12T21:43:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2023-12-26T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-19T01:16:35","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18223-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20442-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18223-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20442-17084"],"Type":3}],"Title":{"Value":"cJSON v1.7.16 was discovered to contain a segmentation violation via the function cJSON_SetValuestring at cJSON.c."}},{"Acknowledgments":[],"CVE":"CVE-2023-50495","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18227-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19855-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"MITRE","Type":8,"Value":"MITRE"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"24","ProductStatuses":[{"ProductID":["18227-16823","19855-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.4-3","ProductID":["18227-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18227-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"ProductID":["19855-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19855-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-07T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:13:56","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18227-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19855-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18227-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19855-17084"],"Type":3}],"Title":{"Value":"NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry()."}},{"Acknowledgments":[],"CVE":"CVE-2023-50658","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20013-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17405-21692"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18163-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18164-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19664-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17405-17086"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-770","Value":"Allocation of Resources Without Limits or Throttling"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"25","ProductStatuses":[{"ProductID":["20013-17086","17405-21692","18163-16823","18164-17084","19664-17084","17405-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.29.4-1","ProductID":["20013-17086","17405-21692","18163-16823","18164-17084","19664-17084","17405-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20013-17086","17405-21692","18163-16823","18164-17084","19664-17084","17405-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-08-12T21:38:34","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-02-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-02-15T00:00:00","Description":{"Value":"<p>Added telegraf to CBL-Mariner 2.0\nAdded telegraf to Azure Linux 3.0</p>\n"},"Number":"1.2"},{"Date":"2026-02-20T23:09:57","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20013-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17405-21692"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18163-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18164-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19664-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17405-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20013-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17405-21692"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18163-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18164-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19664-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17405-17086"],"Type":3}],"Title":{"Value":"The jose2go component before 1.6.0 for Go allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value."}},{"Acknowledgments":[],"CVE":"CVE-2023-5115","CVSSScoreSets":[{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19716-17084"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18218-16823"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17822-17084"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19710-17086"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N"},{"BaseScore":6.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17445-17086"],"TemporalScore":6.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N"}],"CWE":[{"ID":"CWE-36","Value":"Absolute Path Traversal"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"26","ProductStatuses":[{"ProductID":["19716-17084","18218-16823","17822-17084","19710-17086","17445-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.17.0-1","ProductID":["19716-17084","17822-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19716-17084","17822-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.14.11-1","ProductID":["18218-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18218-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.14.18-1","ProductID":["19710-17086","17445-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19710-17086","17445-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-07-10T00:00:00","Description":{"Value":"<p>Added ansible to CBL-Mariner 2.0\nAdded ansible to Azure Linux 3.0</p>\n"},"Number":"2.0"},{"Date":"2026-02-18T01:55:20","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19716-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18218-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17822-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19710-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17445-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19716-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18218-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17822-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19710-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17445-17086"],"Type":3}],"Title":{"Value":"Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files"}},{"Acknowledgments":[],"CVE":"CVE-2023-51384","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19897-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18224-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18225-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"27","ProductStatuses":[{"ProductID":["19897-17084","18224-16823","18225-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"9.7p1-1","ProductID":["19897-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19897-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.9p1-3","ProductID":["18224-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18224-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18225-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18225-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T01:22:01","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2023-12-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19897-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18224-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18225-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19897-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18224-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18225-17084"],"Type":3}],"Title":{"Value":"In ssh-agent in OpenSSH before 9.6 certain destination constraints can be incompletely applied. When destination constraints are specified during addition of PKCS#11-hosted private keys these constraints are only applied to the first key even if a PKCS#11 token returns multiple keys."}},{"Acknowledgments":[],"CVE":"CVE-2023-51385","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19897-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18224-16823"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18225-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"}],"CWE":[{"ID":"CWE-78","Value":"Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"28","ProductStatuses":[{"ProductID":["19897-17084","18224-16823","18225-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"9.7p1-1","ProductID":["19897-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19897-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"8.9p1-3","ProductID":["18224-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18224-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["18225-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18225-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T01:22:41","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2023-12-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19897-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18224-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18225-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19897-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18224-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18225-17084"],"Type":3}],"Title":{"Value":"In ssh in OpenSSH before 9.6 OS command injection might occur if a user name or host name has shell metacharacters and this name is referenced by an expansion token in certain situations. For example an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name."}},{"Acknowledgments":[],"CVE":"CVE-2023-51714","CVSSScoreSets":[{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19737-17086"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18179-16823"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17680-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19741-17084"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":9.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17384-17086"],"TemporalScore":9.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"29","ProductStatuses":[{"ProductID":["19737-17086","18179-16823","17680-17084","19741-17084","17384-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.12.11-10","ProductID":["19737-17086","18179-16823","17384-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19737-17086","18179-16823","17384-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.6.2-1","ProductID":["17680-17084","19741-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17680-17084","19741-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-08-17T20:44:30","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2024-01-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-18T01:58:25","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19737-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18179-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17680-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19741-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17384-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19737-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["18179-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["17680-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["19741-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["17384-17086"],"Type":3}],"Title":{"Value":"An issue was discovered in the HTTP2 implementation in Qt before 5.15.17 6.x before 6.2.11 6.3.x through 6.5.x before 6.5.4 and 6.6.x before 6.6.2. network/access/http2/hpacktable.cpp has an incorrect HPack integer overflow check."}},{"Acknowledgments":[],"CVE":"CVE-2023-51764","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19749-17086"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18197-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18198-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19753-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"CWE":[{"ID":"CWE-345","Value":"Insufficient Verification of Data Authenticity"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"30","ProductStatuses":[{"ProductID":["19749-17086","18197-16823","18198-17084","19753-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.7.0-3","ProductID":["19749-17086","18197-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19749-17086","18197-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.9.0-1","ProductID":["18198-17084","19753-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18198-17084","19753-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-01-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-18T02:00:04","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19749-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18197-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18198-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19753-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19749-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18197-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18198-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19753-17084"],"Type":3}],"Title":{"Value":"Postfix through 3.8.5 allows SMTP smuggling unless configured with smtpd_data_restrictions=reject_unauth_pipelining and smtpd_discard_ehlo_keywords=chunking (or certain other options that exist in recent versions). Remote attackers can use a published exploitation technique to inject e-mail messages with a spoofed MAIL FROM address allowing bypass of an SPF protection mechanism. This occurs because Postfix supports <LF>.<CR><LF> but some other popular e-mail servers do not. To prevent attack variants (by always disallowing <LF> without <CR>) a different solution is required such as the smtpd_forbid_bare_newline=yes option with a Postfix minimum version of 3.5.23 3.6.13 3.7.9 3.8.4 or 3.9."}},{"Acknowledgments":[],"CVE":"CVE-2023-51779","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17785-17084"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17748-17084"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"31","ProductStatuses":[{"ProductID":["17785-17084","17748-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.6.29.1-1","ProductID":["17785-17084","17748-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17785-17084","17748-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-20T23:38:03","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17785-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17748-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17785-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17748-17084"],"Type":3}],"Title":{"Value":"bt_sock_recvmsg in net/bluetooth/af_bluetooth.c in the Linux kernel through 6.6.8 has a use-after-free because of a bt_sock_ioctl race condition."}},{"Acknowledgments":[],"CVE":"CVE-2023-51780","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19673-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17452-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17828-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19874-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17095-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"32","ProductStatuses":[{"ProductID":["19673-17086","17452-16823","17828-16823","19874-17086","17095-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.148.1-1","ProductID":["19673-17086","17452-16823","17095-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19673-17086","17452-16823","17095-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.145.2-1","ProductID":["17828-16823","19874-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17828-16823","19874-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-01-16T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-01-19T00:00:00","Description":{"Value":"<p>Added kernel to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2026-02-18T02:18:20","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17452-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17828-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19874-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17095-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17452-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17828-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19874-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17095-17086"],"Type":3}],"Title":{"Value":"An issue was discovered in the Linux kernel before 6.6.8. do_vcc_ioctl in net/atm/ioctl.c has a use-after-free because of a vcc_recvmsg race condition."}},{"Acknowledgments":[],"CVE":"CVE-2023-51781","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19673-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17452-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17095-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"33","ProductStatuses":[{"ProductID":["19673-17086","17452-16823","17095-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.148.1-1","ProductID":["19673-17086","17452-16823","17095-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19673-17086","17452-16823","17095-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:53:08","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-01-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17452-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17095-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17452-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17095-17086"],"Type":3}],"Title":{"Value":"An issue was discovered in the Linux kernel before 6.6.8. atalk_ioctl in net/appletalk/ddp.c has a use-after-free because of an atalk_recvmsg race condition."}},{"Acknowledgments":[],"CVE":"CVE-2023-51782","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17095-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17452-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19673-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"34","ProductStatuses":[{"ProductID":["17095-17086","17452-16823","19673-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.148.1-1","ProductID":["17095-17086","17452-16823","19673-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17095-17086","17452-16823","19673-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-01-19T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T02:52:36","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17095-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17452-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17095-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17452-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":3}],"Title":{"Value":"An issue was discovered in the Linux kernel before 6.6.8. rose_ioctl in net/rose/af_rose.c has a use-after-free because of a rose_accept race condition."}},{"Acknowledgments":[],"CVE":"CVE-2023-52284","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19701-17086"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-415","Value":"Double Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mitre","Type":8,"Value":"mitre"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"35","ProductStatuses":[{"ProductID":["19701-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.1.10-3","ProductID":["19701-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19701-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T01:53:36","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-01-02T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19701-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19701-17086"],"Type":3}],"Title":{"Value":"Bytecode Alliance wasm-micro-runtime (aka WebAssembly Micro Runtime or WAMR) before 1.3.0 can have an \"double free or corruption\" error for a valid WebAssembly module because push_pop_frame_ref_offset is mishandled."}},{"Acknowledgments":[],"CVE":"CVE-2023-5764","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19716-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17445-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17822-17084"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-1336","Value":"Improper Neutralization of Special Elements Used in a Template Engine"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"36","ProductStatuses":[{"ProductID":["19716-17084","17445-16823","17822-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.17.0-1","ProductID":["19716-17084","17822-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19716-17084","17822-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"2.14.12-2","ProductID":["17445-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17445-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T14:56:25","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.3"},{"Date":"2023-12-21T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19716-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17445-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17822-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19716-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17445-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17822-17084"],"Type":3}],"Title":{"Value":"Ansible: template injection"}},{"Acknowledgments":[],"CVE":"CVE-2023-5868","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18239-16823"],"TemporalScore":4.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}],"CWE":[{"ID":"CWE-686","Value":"Function Call With Incorrect Argument Type"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"37","ProductStatuses":[{"ProductID":["18239-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.10-1","ProductID":["18239-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18239-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18239-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18239-16823"],"Type":3}],"Title":{"Value":"Postgresql: memory disclosure in aggregate function calls"}},{"Acknowledgments":[],"CVE":"CVE-2023-5869","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18239-16823"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"38","ProductStatuses":[{"ProductID":["18239-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.10-1","ProductID":["18239-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18239-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18239-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18239-16823"],"Type":3}],"Title":{"Value":"Postgresql: buffer overrun from integer overflow in array modification"}},{"Acknowledgments":[],"CVE":"CVE-2023-5870","CVSSScoreSets":[{"BaseScore":4.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19262-17084"],"TemporalScore":4.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":4.4,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17174-16823"],"TemporalScore":4.4,"Vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-400","Value":"Uncontrolled Resource Consumption"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"39","ProductStatuses":[{"ProductID":["19262-17084","17174-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"16.3-1","ProductID":["19262-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19262-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"14.14-1","ProductID":["17174-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17174-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-11-23T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:28:35","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19262-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17174-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19262-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17174-16823"],"Type":3}],"Title":{"Value":"Postgresql: role pg_signal_backend can signal certain superuser processes."}},{"Acknowledgments":[],"CVE":"CVE-2023-6228","CVSSScoreSets":[{"BaseScore":3.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18228-16823"],"TemporalScore":3.3,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18229-17084"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"40","ProductStatuses":[{"ProductID":["18228-16823","18229-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"4.6.0-6","ProductID":["18228-16823","18229-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18228-16823","18229-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-05-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2025-04-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18228-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18229-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["18228-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["18229-17084"],"Type":3}],"Title":{"Value":"Libtiff: heap-based buffer overflow in cpstriptotile() in tools/tiffcp.c"}},{"Acknowledgments":[],"CVE":"CVE-2023-6337","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17766-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19863-17084"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-770","Value":"Allocation of Resources Without Limits or Throttling"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"HashiCorp","Type":8,"Value":"HashiCorp"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"41","ProductStatuses":[{"ProductID":["17766-17084","19863-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.12.12-1","ProductID":["17766-17084","19863-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17766-17084","19863-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:46:33","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-08-17T21:24:50","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17766-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19863-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17766-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19863-17084"],"Type":3}],"Title":{"Value":"Vault May be Vulnerable to a Denial of Service Through Memory Exhaustion When Handling Large HTTP Requests"}},{"Acknowledgments":[],"CVE":"CVE-2023-6377","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18226-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"42","ProductStatuses":[{"ProductID":["18226-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.20.10-5","ProductID":["18226-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18226-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18226-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18226-16823"],"Type":3}],"Title":{"Value":"Xorg-x11-server: out-of-bounds memory reads/writes in xkb button actions"}},{"Acknowledgments":[],"CVE":"CVE-2023-6478","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18226-16823"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"43","ProductStatuses":[{"ProductID":["18226-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"1.20.10-5","ProductID":["18226-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18226-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18226-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18226-16823"],"Type":3}],"Title":{"Value":"Xorg-x11-server: out-of-bounds memory read in rrchangeoutputproperty and rrchangeproviderproperty"}},{"Acknowledgments":[],"CVE":"CVE-2023-6507","CVSSScoreSets":[{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19964-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N"},{"BaseScore":4.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17712-17084"],"TemporalScore":4.9,"Vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-269","Value":"Improper Privilege Management"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"PSF","Type":8,"Value":"PSF"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"44","ProductStatuses":[{"ProductID":["19964-17084","17712-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.12.3-1","ProductID":["19964-17084","17712-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19964-17084","17712-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-09-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:34:44","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19964-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17712-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19964-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["17712-17084"],"Type":3}],"Title":{"Value":"Groups not dropped before running subprocess when using empty 'extra_groups' parameter"}},{"Acknowledgments":[],"CVE":"CVE-2023-6546","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17452-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19673-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17095-17086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-362","Value":"Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"45","ProductStatuses":[{"ProductID":["17452-16823","19673-17086","17095-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.148.1-1","ProductID":["17452-16823","19673-17086","17095-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17452-16823","19673-17086","17095-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-01-04T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:56:22","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17452-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17095-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17452-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19673-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17095-17086"],"Type":3}],"Title":{"Value":"Kernel: gsm multiplexing race condition leads to privilege escalation"}},{"Acknowledgments":[],"CVE":"CVE-2023-6560","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["16838-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-119","Value":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"46","ProductStatuses":[{"ProductID":["16838-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.153.1-1","ProductID":["16838-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["16838-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["16838-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["16838-16823"],"Type":3}],"Title":{"Value":"Kernel: io_uring out of boundary memory access in __io_uaddr_map()"}},{"Acknowledgments":[],"CVE":"CVE-2023-6606","CVSSScoreSets":[{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19683-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20412-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20613-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20725-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20823-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20860-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20956-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21094-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21248-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21474-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21580-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21626-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21684-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21892-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21932-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20553-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20788-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21308-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":7.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21332-17084"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21344-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["21443-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["22400-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"},{"BaseScore":6.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["22276-17084"],"TemporalScore":6.1,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"47","ProductStatuses":[{"ProductID":["19683-17084","20412-17084","20613-17084","20725-17084","20823-17084","20860-17084","20956-17084","21094-17084","21248-17084","21474-17084","21580-17084","21626-17084","21684-17084","21892-17084","21932-17084","20553-17084","20788-17084","21308-17084","21332-17084","21344-17084","21443-17084","22400-17084","22276-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"","ProductID":["21892-17084","21932-17084","22400-17084","22276-17084"],"RestartRequired":{},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["21892-17084","21932-17084","22400-17084","22276-17084"],"SubType":"Release Notes","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-09-03T19:34:06","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-01-20T14:43:10","Description":{"Value":"<p>Information published.</p>\n"},"Number":"4.0"},{"Date":"2026-03-04T14:41:36","Description":{"Value":"<p>Information published.</p>\n"},"Number":"6.0"},{"Date":"2026-03-31T15:04:16","Description":{"Value":"<p>Information published.</p>\n"},"Number":"7.0"},{"Date":"2026-04-29T14:48:39","Description":{"Value":"<p>Information published.</p>\n"},"Number":"8.0"},{"Date":"2026-05-11T01:44:36","Description":{"Value":"<p>Information published.</p>\n"},"Number":"10.0"},{"Date":"2026-05-22T01:38:18","Description":{"Value":"<p>Information published.</p>\n"},"Number":"11.1"},{"Date":"2026-06-28T01:51:57","Description":{"Value":"<p>Information published.</p>\n"},"Number":"13.0"},{"Date":"2026-09-24T01:54:47","Description":{"Value":"<p>Information published.</p>\n"},"Number":"17.0"},{"Date":"2025-12-07T01:44:32","Description":{"Value":"<p>Information published.</p>\n"},"Number":"2.0"},{"Date":"2026-01-08T14:43:26","Description":{"Value":"<p>Information published.</p>\n"},"Number":"3.0"},{"Date":"2026-02-18T02:33:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"5.0"},{"Date":"2026-05-06T14:45:53","Description":{"Value":"<p>Information published.</p>\n"},"Number":"9.0"},{"Date":"2026-05-17T14:45:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"11.0"},{"Date":"2026-06-17T14:47:49","Description":{"Value":"<p>Information published.</p>\n"},"Number":"12.0"},{"Date":"2026-07-12T14:54:11","Description":{"Value":"<p>Information published.</p>\n"},"Number":"14.0"},{"Date":"2026-08-10T14:47:26","Description":{"Value":"<p>Information published.</p>\n"},"Number":"15.0"},{"Date":"2026-09-23T01:55:37","Description":{"Value":"<p>Information published.</p>\n"},"Number":"16.0"},{"Date":"2026-09-24T01:59:47","Description":{"Value":"<p>Information published.</p>\n"},"Number":"18.0"},{"Date":"2026-11-05T14:58:58","Description":{"Value":"<p>Information published.</p>\n"},"Number":"20.0"},{"Date":"2026-11-01T15:01:15","Description":{"Value":"<p>Information published.</p>\n"},"Number":"19.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19683-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20412-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20613-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20725-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20823-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20860-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20956-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21094-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21248-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21474-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21580-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21626-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21684-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21892-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21932-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20553-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20788-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21308-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21332-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21344-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["21443-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["22400-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["22276-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19683-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20412-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20613-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20725-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20823-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20860-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20956-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21094-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21248-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21474-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21580-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21626-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21684-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21892-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21932-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20553-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["20788-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21308-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["21332-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21344-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["21443-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["22400-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["22276-17084"],"Type":3}],"Title":{"Value":"Kernel: out-of-bounds read vulnerability in smbcalcsize"}},{"Acknowledgments":[],"CVE":"CVE-2023-6622","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18220-16823"],"TemporalScore":5.5,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}],"CWE":[{"ID":"CWE-476","Value":"NULL Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"48","ProductStatuses":[{"ProductID":["18220-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.143.1-1","ProductID":["18220-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18220-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-22T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18220-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18220-16823"],"Type":3}],"Title":{"Value":"Kernel: null pointer dereference vulnerability in nft_dynset_init()"}},{"Acknowledgments":[],"CVE":"CVE-2023-6817","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18230-16823"],"TemporalScore":7.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Google","Type":8,"Value":"Google"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"49","ProductStatuses":[{"ProductID":["18230-16823"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.145.2-1","ProductID":["18230-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18230-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-12-18T00:00:00","Description":{"Value":"<p>Added kernel to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2024-07-12T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-03-12T00:00:00","Description":{"Value":"<p>Added kernel to CBL-Mariner 2.0</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18230-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18230-16823"],"Type":3}],"Title":{"Value":"Use-after-free in Linux kernel's netfilter: nf_tables component"}},{"Acknowledgments":[],"CVE":"CVE-2023-6918","CVSSScoreSets":[{"BaseScore":3.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["20073-17084"],"TemporalScore":3.7,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18208-16823"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18214-17084"],"TemporalScore":5.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"CWE":[{"ID":"CWE-252","Value":"Unchecked Return Value"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"50","ProductStatuses":[{"ProductID":["20073-17084","18208-16823","18214-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"0.10.6-1","ProductID":["20073-17084","18208-16823","18214-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["20073-17084","18208-16823","18214-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2023-12-25T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2025-03-27T00:00:00","Description":{"Value":"<p>Added libssh to Azure Linux 3.0\nAdded libssh to CBL-Mariner 2.0</p>\n"},"Number":"1.1"},{"Date":"2026-02-19T01:19:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["20073-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18208-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18214-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["20073-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18208-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18214-17084"],"Type":3}],"Title":{"Value":"Libssh: missing checks for return values for digests"}},{"Acknowledgments":[],"CVE":"CVE-2023-6931","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19529-17084"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18220-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17065-17084"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Google","Type":8,"Value":"Google"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"51","ProductStatuses":[{"ProductID":["19529-17084","18220-16823","17065-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.6.35.1-4","ProductID":["19529-17084","17065-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19529-17084","17065-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.143.1-1","ProductID":["18220-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18220-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2024-08-15T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2026-02-19T01:11:05","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2023-12-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19529-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18220-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17065-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19529-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18220-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17065-17084"],"Type":3}],"Title":{"Value":"Out-of-bounds write in Linux kernel's Performance Events system component"}},{"Acknowledgments":[],"CVE":"CVE-2023-6932","CVSSScoreSets":[{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18220-16823"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["17062-17084"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"BaseScore":7.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19529-17084"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"Google","Type":8,"Value":"Google"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"52","ProductStatuses":[{"ProductID":["18220-16823","17062-17084","19529-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"5.15.143.1-1","ProductID":["18220-16823"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18220-16823"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"-","ProductID":["17062-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["17062-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"6.6.29.1-4","ProductID":["19529-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19529-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-19T01:11:17","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.2"},{"Date":"2023-12-29T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2024-06-30T07:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18220-16823"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["17062-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19529-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18220-16823"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["17062-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["19529-17084"],"Type":3}],"Title":{"Value":"Use-after-free in Linux kernel's ipv4: igmp component"}},{"Acknowledgments":[],"CVE":"CVE-2023-7008","CVSSScoreSets":[{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19661-17086"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18413-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19667-17086"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19687-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"BaseScore":5.9,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19692-17084"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"CWE":[{"ID":"CWE-300","Value":"Channel Accessible by Non-Endpoint"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"redhat","Type":8,"Value":"redhat"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"53","ProductStatuses":[{"ProductID":["19661-17086","18413-17084","19667-17086","19687-17084","19692-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"250.3-22","ProductID":["19661-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19661-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"255-20","ProductID":["18413-17084","19692-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["18413-17084","19692-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"250.3-13","ProductID":["19667-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19667-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"250.3-18","ProductID":["19687-17084"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19687-17084"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2025-07-11T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T01:52:31","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19661-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18413-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19667-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19687-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19692-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19661-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18413-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19667-17086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19687-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19692-17084"],"Type":3}],"Title":{"Value":"Systemd-resolved: unsigned name response in signed zone is not refused when dnssec=yes"}},{"Acknowledgments":[],"CVE":"CVE-2023-7104","CVSSScoreSets":[{"BaseScore":7.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19759-17086"],"TemporalScore":7.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"}],"CWE":[{"ID":"CWE-119","Value":"Improper Restriction of Operations within the Bounds of a Memory Buffer"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"VulDB","Type":8,"Value":"VulDB"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"54","ProductStatuses":[{"ProductID":["19759-17086"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"CBL-Mariner Releases"},"FixedBuild":"3.39.2-3","ProductID":["19759-17086"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"ProductID":["19759-17086"],"SubType":"CBL-Mariner Releases","Type":3,"URL":"https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"}],"RevisionHistory":[{"Date":"2026-02-18T02:01:02","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2024-01-06T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19759-17086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19759-17086"],"Type":3}],"Title":{"Value":"SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow"}},{"Acknowledgments":[],"CVE":"CVE-2023-6864","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"55","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T23:22:24","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:50:48","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6858","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"56","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T20:32:43","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:22:45","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6856","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"57","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-02-18T14:46:26","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-09-03T22:54:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6860","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"58","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-02-18T15:09:41","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-09-03T20:34:17","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to escape the sandbox. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6863","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"59","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T20:57:54","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T15:12:11","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that lacked a virtual destructor. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6866","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-755","Value":"Improper Handling of Exceptional Conditions"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"60","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-02-18T15:09:55","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-09-03T20:35:52","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6869","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19686-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["19671-17084"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"61","ProductStatuses":[{"ProductID":["18469-17084","19686-17084","19671-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2026-02-18T15:10:55","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"},{"Date":"2025-09-03T20:46:14","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19686-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["19671-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["18469-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19686-17084"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["19671-17084"],"Type":3}],"Title":{"Value":"A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox < 121."}},{"Acknowledgments":[],"CVE":"CVE-2023-6873","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["18469-17084"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"CWE":[{"ID":"CWE-787","Value":"Out-of-bounds Write"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?</strong></p>\n<p>One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See <a href=\"https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux\">this blog</a> post for more information. If impact to additional products is identified, we will update the CVE to reflect this.</p>\n"},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"mozilla","Type":8,"Value":"mozilla"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"62","ProductStatuses":[{"ProductID":["18469-17084"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[],"RevisionHistory":[{"Date":"2025-09-03T19:37:17","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2026-02-18T14:58:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["18469-17084"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["18469-17084"],"Type":3}],"Title":{"Value":"Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 121."}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/ranchoice\">RanchoIce</a>"}],"URL":[""]}],"CVE":"CVE-2023-36696","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Cloud Files Mini Filter Driver","Type":7,"Value":"Windows Cloud Files Mini Filter Driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"63","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12244","12243","12242"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12243","12242"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://batr.am/\">batram</a>"}],"URL":[""]}],"CVE":"CVE-2023-36020","CVSSScoreSets":[{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11921"],"TemporalScore":6.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11664"],"TemporalScore":6.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-79","Value":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?</strong></p>\n<p>The attacker is only able to modify the content of the vulnerable link to redirect the victim to a malicious site.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>\n<p>The vulnerability is in the web server, but the malicious scripts execute in the victim’s browser on their machine.</p>\n"},{"Ordinal":"20","Title":"Microsoft Dynamics","Type":7,"Value":"Microsoft Dynamics"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"64","ProductStatuses":[{"ProductID":["11921","11664"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5032297"},"FixedBuild":"9.1.23.10","ProductID":["11921"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/download/details.aspx?id=105717"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5032298"},"FixedBuild":"9.0.51.06","ProductID":["11664"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/en-us/download/details.aspx?id=105716"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11921"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11664"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11921"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11664"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://erpaciocco.github.io/\">ErPaciocco</a>"}],"URL":[""]}],"CVE":"CVE-2023-36009","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11951"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10753"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10754"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>A user needs to be tricked into running malicious files.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Word","Type":7,"Value":"Microsoft Office Word"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"65","ProductStatuses":[{"ProductID":["11573","11574","11762","11763","11951","11952","11953","10753","10754"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"16.80.23121017","ProductID":["11951"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002520"},"FixedBuild":"16.0.5426.1000","ProductID":["10753"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=bda5c443-d654-4c9a-9a31-9f629661ad9a"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002520"},"FixedBuild":"16.0.5426.1000","ProductID":["10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=89300b5c-782a-4450-9781-31598ff82d40"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10753"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10754"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10753"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10754"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Word Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"guopengfei with QiAnXin Group"}],"URL":[""]}],"CVE":"CVE-2023-36011","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-822","Value":"Untrusted Pointer Dereference"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Win32K","Type":7,"Value":"Windows Win32K"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"66","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Win32k Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-35618","CVSSScoreSets":[{"BaseScore":9.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":8.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) that contains a specially crafted file that is designed to exploit the vulnerability. However, an attacker would have no way to force the user to visit the website. Instead, an attacker would have to convince the user to click a link, typically by way of an enticement in an email or Instant Messenger message, and then convince the user to open the specially crafted file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is the severity for this CVE rated as Moderate, but the CVSS score is higher than normal?</strong></p>\n<p><a href=\"https://www.microsoft.com/en-us/msrc/bounty-new-edge\">Per our severity guidelines</a>, the amount of user interaction or preconditions required to allow this sort of exploitation downgraded the severity, specifically it says, "If a bug requires more than a click, a key press, or several preconditions, the severity will be downgraded". The CVSS scoring system doesn't allow for this type of nuance.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could allow the attacker to gain the privileges needed to perform code execution.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>\n<p>This vulnerability could lead to a browser sandbox escape.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"67","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-07T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"},{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Added FAQ to indicate the version numbers for this CVE. This is an informational change only.</p>\n"},"Number":"1.1"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Moderate"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Fei Deng"}],"URL":[""]}],"CVE":"CVE-2023-35625","CVSSScoreSets":[{"BaseScore":4.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12266"],"TemporalScore":4.1,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-200","Value":"Exposure of Sensitive Information to an Unauthorized Actor"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p>\n<p>The vulnerability enables data leakage only when a user's script is improperly used and triggers specific errors. The conditions required for triggering the error are not easily met making the complexity high.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The Azure Machine Learning (ML) training data associated with user accounts will be disclosed. This data primarily consists of information used for ML model training purposes within the Azure ML system.</p>\n"},{"Ordinal":"20","Title":"Azure Machine Learning","Type":7,"Value":"Azure Machine Learning"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"68","ProductStatuses":[{"ProductID":["12266"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.5.0","ProductID":["12266"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://pypi.org/project/mltable/1.5.0/"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12266"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12266"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/quangnh89\">Nguyễn Hồng Quang (@quangnh89)</a> with <a href=\"https://viettelcybersecurity.com/\">Viettel Cyber Security</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/tacbliw\">Lê Trần Hải Tùng (@tacbliw)</a> with <a href=\"https://viettelcybersecurity.com/\">Viettel Cyber Security</a>"}],"URL":[""]}],"CVE":"CVE-2023-21740","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p>\n<p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p>\n<p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p>\n<ul>\n<li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li>\n<li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li>\n</ul>\n<p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"20","Title":"Windows Media","Type":7,"Value":"Windows Media"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"69","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Media Remote Code Execution Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-20588","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this AMD CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in certain processor models offered by AMD. The mitigation for this vulnerability requires a Windows update. This CVE is being documented in the Security Update Guide to announce that the latest builds of Windows enable the mitigation and provide protection against the vulnerability.</p>\n<p>Please see the following for more information:</p>\n<ul>\n<li><a href=\"https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7007.html\">AMD-SB-7007</a></li>\n</ul>\n"},{"Ordinal":"20","Title":"Chipsets","Type":7,"Value":"Chipsets"},{"Ordinal":"30","Title":"AMD","Type":8,"Value":"AMD"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"70","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"AMD: CVE-2023-20588 AMD Speculative Leaks Security Notice"}},{"Acknowledgments":[],"CVE":"CVE-2023-7024","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n<p>Google is aware that an exploit for CVE-2023-7024 exists in the wild.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.91</td>\n<td>12/21/2023</td>\n<td>120.0.6099.130</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"71","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.91","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-21T18:16:53","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC"}},{"Acknowledgments":[{"Name":[{"Value":"Josef Haji Karimian"}],"URL":[""]}],"CVE":"CVE-2023-38174","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":3.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p>\n<p>Exploitation of this vulnerability only discloses limited information, no sensitive information can be obtained.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"72","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Added FAQ to indicate the version numbers for this CVE. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2023-12-07T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/filip_dragovic\">Filip Dragović</a>"}],"URL":[""]}],"CVE":"CVE-2023-36391","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Local Security Authority Subsystem Service (LSASS)","Type":7,"Value":"Windows Local Security Authority Subsystem Service (LSASS)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"73","ProductStatuses":[{"ProductID":["12242","12243"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Local Security Authority Subsystem Service Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Kaixuan Luo with Summer Intern @ Samsung Research America, PhD Student @ The Chinese University of Hong Kong"}],"URL":[""]},{"Name":[{"Value":"Adonis Fung with Samsung Research America"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/sanebow\">Xianbo Wang (@sanebow)</a> with The Chinese University of Hong Kong"}],"URL":[""]},{"Name":[{"Value":"Wing Cheong Lau with The Chinese University of Hong Kong"}],"URL":[""]}],"CVE":"CVE-2023-36019","CVSSScoreSets":[{"BaseScore":9.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12263"],"TemporalScore":8.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":9.6,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12228"],"TemporalScore":8.3,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-73","Value":"External Control of File Name or Path"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p>\n<p>The vulnerability is in the web server, but the malicious scripts execute in the victim’s browser on their machine.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How do I know if my connector does not have a per-connector redirect URI?</strong></p>\n<p>Microsoft notified affected customers about this change in behavior via Microsoft 365 Admin Center (MC690931) or Service Health in the Azure Portal (3_SH-LTG) starting on November 17th, 2023. You will need to validate your custom connectors and follow the guidance to make the switch to the per-connector URI.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How do I know if a notification was sent to my organization?</strong></p>\n<p>Notifications were sent to customers via the Microsoft 365 Admin Center using a Data Privacy tag. This means that only users with a global administrator role or a Message center privacy reader role can view the notification. These roles are appointed by your organization. You can learn more about these roles and how to assign them at <a href=\"https://azure.microsoft.com/en-us/blog/understanding-service-health-communications-for-azure-vulnerabilities/\">https://azure.microsoft.com/en-us/blog/understanding-service-health-communications-for-azure-vulnerabilities/</a>. If you are a Logic Apps customer, a notification was sent via Service Health in the Azure Portal under tracking ID 3_SH-LTG.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the nature of the spoofing?</strong></p>\n<p>An attacker could manipulate a malicious link, application, or file to disguise it as a legitimate link or file to trick the victim.</p>\n"},{"Ordinal":"20","Title":"Microsoft Power Platform Connector","Type":7,"Value":"Microsoft Power Platform Connector"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"74","ProductStatuses":[{"ProductID":["12263","12228"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"3.23113","ProductID":["12263","12228"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/connectors/custom-connectors/#21-oauth-20"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p><strong>The following mitigation has been applied to address this vulnerability:</strong></p>\n<p>As of November 17, 2023, newly created custom connectors that use OAuth 2.0 to authenticate will automatically have a per connector redirect URI. Existing OAuth 2.0 connectors must be updated to use a per-connector redirect URI by February 19, 2024. Microsoft will start updating the custom connectors to use the per connector redirect URLs on February 19, 2024. Between February 19, 2024 - March 29, 2024, custom connectors without a per-connector redirect URI will gradually become deprecated. After March 29, 2024, users will no longer be able to create connections to or use existing OAuth 2.0 custom connectors that have not been updated. For more information see <a href=\"https://learn.microsoft.com/en-us/connectors/custom-connectors/#21-oauth-20\">https://learn.microsoft.com/en-us/connectors/custom-connectors/#21-oauth-20</a>.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2024-02-13T08:00:00","Description":{"Value":"<p>Updated the mitigation to inform customers with existing OAuth 2.0 connectors that these connectors must be updated to use a per-connector redirect URI by March 29, 2024. After March 29, 2024, users will no longer be able to create connections to or use existing OAuth 2.0 custom connectors that have not been updated. For more information see <a href=\"https://learn.microsoft.com/en-us/connectors/custom-connectors/#21-oauth-20\">https://learn.microsoft.com/en-us/connectors/custom-connectors/#21-oauth-20</a>. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2024-02-16T08:00:00","Description":{"Value":"<p>Added clarifying information to the mitigation. This is an informational change only.</p>\n"},"Number":"1.2"},{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12263"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12228"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12263"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12228"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Power Platform Connector Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Tomer Bar with <a href=\"https://safebreach.com/\">SafeBreach</a> and Shmuel Cohen with <a href=\"https://safebreach.com/\">SafeBreach</a>"}],"URL":[""]}],"CVE":"CVE-2023-36010","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12183"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Windows Defender","Type":7,"Value":"Windows Defender"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"75","ProductStatuses":[{"ProductID":["12183"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"4.18.23110.3","ProductID":["12183"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12183"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12183"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Defender Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-36012","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-908","Value":"Use of Uninitialized Resource"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized memory.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L) but have no effect on integrity (I:N) or on availability (A:N). What does that mean for this vulnerability?</strong></p>\n<p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).</p>\n"},{"Ordinal":"20","Title":"Windows DHCP Server","Type":7,"Value":"Windows DHCP Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"76","ProductStatuses":[{"ProductID":["11571","11572","11923","11924","12244","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"DHCP Server Service Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/m417z\">Michael Maltsev</a> with <a href=\"https://www.island.io/\">Island</a>"}],"URL":[""]},{"Name":[{}],"URL":[""]}],"CVE":"CVE-2023-36003","CVSSScoreSets":[{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.7,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.8,"Vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-426","Value":"Untrusted Search Path"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>An authorized attacker with regular user privileges may be able to inject a malicious file and then convince a user to execute a UWP application.</p>\n"},{"Ordinal":"20","Title":"XAML Diagnostics","Type":7,"Value":"XAML Diagnostics"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"77","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"XAML Diagnostics Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Jeremy Asbury with <a href=\"https://www.mandiant.com/\">Mandiant</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/andrewoliveau\">Andrew Oliveau</a> with <a href=\"https://www.mandiant.com/\">Mandiant</a>"}],"URL":[""]}],"CVE":"CVE-2023-36004","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-287","Value":"Improper Authentication"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?</strong></p>\n<p>An unauthorized attacker must wait for a user to initiate a connection.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the attack vector for this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to launch a machine-in-the-middle (MITM) attack against the traffic passing between a domain controller and the target machine.</p>\n"},{"Ordinal":"20","Title":"Windows DPAPI (Data Protection Application Programming Interface)","Type":7,"Value":"Windows DPAPI (Data Protection Application Programming Interface)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"78","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows DPAPI (Data Protection Application Programming Interface) Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-36005","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-591","Value":"Sensitive Data Storage in Improperly Locked Memory"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\\Network Service” account.</p>\n"},{"Ordinal":"20","Title":"Windows Telephony Server","Type":7,"Value":"Windows Telephony Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"79","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Telephony Server Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"Anonymous"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=https://www.twitter.com/guhe120>Yuki Chen</a> with <a href=https://www.cyberkl.com/>Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/20brokensp\">Sam Pope</a> with MSRC Vulnerabilities & Mitigations"}],"URL":[""]}],"CVE":"CVE-2023-36006","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-121","Value":"Stack-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p>\n<p>An authenticated victim who is connected to the network must be tricked or persuaded to connect to a malicious SQL database using their SQL client application. After the connection is made, the server can send specially crafted replies to the client that exploit the vulnerability and permit execution of arbitrary code within the context of the user's SQL client application.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker could exploit the vulnerability by tricking an authenticated user (CVSS metric UI:R) into attempting to connect to a malicious SQL server via a connection driver (for example: ODBC and / or OLEDB as applicable).</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An attacker could exploit the vulnerability by tricking an authenticated user into attempting to connect to a malicious SQL server via OLEDB, which could result in the server receiving a malicious networking packet. This could allow the attacker to execute code remotely on the client.</p>\n"},{"Ordinal":"20","Title":"Microsoft WDAC OLE DB provider for SQL","Type":7,"Value":"Microsoft WDAC OLE DB provider for SQL"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"80","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"YanZiShuang@BigCJTeam of cyberkl"}],"URL":[""]}],"CVE":"CVE-2023-35638","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-126","Value":"Buffer Over-read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Windows DHCP Server","Type":7,"Value":"Windows DHCP Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"81","ProductStatuses":[{"ProductID":["11571","11572","11923","11924","12244","10816","10855","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"DHCP Server Service Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.twitter.com/guhe120\">Yuki Chen</a> with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-35639","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p>\n<p>An authenticated victim who is connected to the network must be tricked or persuaded to connect to a malicious SQL database using their SQL client application. After the connection is made, the server can send specially crafted replies to the client that exploit the vulnerability and permit execution of arbitrary code within the context of the user's SQL client application.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>An attacker could exploit the vulnerability by tricking an authenticated user (CVSS metric UI:R) into attempting to connect to a malicious SQL server via a connection driver (for example: ODBC and / or OLEDB as applicable).</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An attacker could exploit the vulnerability by tricking an authenticated user into attempting to connect to a malicious SQL server via OLEDB, which could result in the server receiving a malicious networking packet. This could allow the attacker to execute code remotely on the client.</p>\n"},{"Ordinal":"20","Title":"Windows ODBC Driver","Type":7,"Value":"Windows ODBC Driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"82","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft ODBC Driver Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]},{"Name":[{"Value":"Wei in Kunlun Lab with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-35641","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-682","Value":"Incorrect Calculation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would need to send a maliciously crafted DHCP message to a server that runs the Internet Connection Sharing service.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?</strong></p>\n<p>This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.</p>\n"},{"Ordinal":"20","Title":"Windows Internet Connection Sharing (ICS)","Type":7,"Value":"Windows Internet Connection Sharing (ICS)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"83","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"<p>The following <a href=\"https://technet.microsoft.com/library/security/dn848375.aspx\">mitigating factors</a> might be helpful in your situation:</p>\n<p>Exploitation of this vulnerability requires that the Internet Connection Sharing (ICS) is enabled.</p>\n"},"Type":1}],"RevisionHistory":[{"Date":"2023-12-13T08:00:00","Description":{"Value":"<p>Added mitigation. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Connection Sharing (ICS) Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-35642","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-682","Value":"Incorrect Calculation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?</strong></p>\n<p>This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.</p>\n"},{"Ordinal":"20","Title":"Windows Internet Connection Sharing (ICS)","Type":7,"Value":"Windows Internet Connection Sharing (ICS)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"84","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Connection Sharing (ICS) Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]}],"CVE":"CVE-2023-35643","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-126","Value":"Buffer Over-read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is remote heap memory.</p>\n"},{"Ordinal":"20","Title":"Windows DHCP Server","Type":7,"Value":"Windows DHCP Server"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"85","ProductStatuses":[{"ProductID":["11571","11572","11923","11924","12244","10816","10855","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"DHCP Server Service Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-35644","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel-Mode Drivers","Type":7,"Value":"Windows Kernel-Mode Drivers"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"86","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Sysmain Service Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/nachoskrnl\">Ben Barnea</a> with <a href=\"https://www.akamai.com/\">Akamai Technologies</a>"}],"URL":[""]}],"CVE":"CVE-2023-35628","CVSSScoreSets":[{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.1,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.1,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-416","Value":"Use After Free"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>Exploitation of this vulnerability requires that an attacker send a malicious link to the victim via email, or that they convince the user to click the link, typically by way of an enticement in an email or Instant Messenger message. In the worst-case email attack scenario, an attacker could send a specially crafted email to the user without a requirement that the victim open, read, or click on the link. This could result in the attacker executing remote code on the victim's machine. When multiple attack vectors can be used, we assign a score based on the scenario with the higher risk (UI:N).</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS Metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability would rely upon complex memory shaping techniques to attempt an attack.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>\n<p>The attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the Outlook client. This could lead to exploitation BEFORE the email is viewed in the Preview Pane.</p>\n"},{"Ordinal":"20","Title":"Windows MSHTML Platform","Type":7,"Value":"Windows MSHTML Platform"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"87","ProductStatuses":[{"ProductID":["12243","12242","12244","11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","10729","10735","10852","10853","10816","10855","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12243","12242","12085","12086"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12242","12085","12086"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033376"},"FixedBuild":"1.001","ProductID":["10051","10049","10378","10379","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"5032191","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033376"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033376"},"FixedBuild":"1.002","ProductID":["10483"],"RestartRequired":{"Value":"Yes"},"SubType":"IE Cumulative","Supercedence":"5032191","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033376"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows MSHTML Platform Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Wei in Kunlun Lab with <a href=\"https://www.cyberkl.com/\">Cyber KunLun</a>"}],"URL":[""]}],"CVE":"CVE-2023-35629","CVSSScoreSets":[{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":6.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":5.9,"Vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Windows USB Mass Storage Class Driver","Type":7,"Value":"Windows USB Mass Storage Class Driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"88","ProductStatuses":[{"ProductID":["10729","10735","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Anonymous"}],"URL":[""]},{"Name":[{"Value":"<a href=\"https://twitter.com/keyz3r0\">k0shl</a> with <a href=\"https://www.cyberkl.com/\">Kunlun Lab</a>"}],"URL":[""]}],"CVE":"CVE-2023-35630","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":7.7,"Vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-122","Value":"Heap-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?</strong></p>\n<p>This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires the attacker to modify an option->length field in a DHCPv6 DHCPV6_MESSAGE_INFORMATION_REQUEST input message.</p>\n"},{"Ordinal":"20","Title":"Windows Internet Connection Sharing (ICS)","Type":7,"Value":"Windows Internet Connection Sharing (ICS)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"89","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11923","11924","11926","11927","11929","11930","11931","12085","12086","12097","12098","12099","12242","12243","12244","10729","10735","10852","10853","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11929","11930","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Critical"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Internet Connection Sharing (ICS) Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft Offensive Research & Security Engineering"}],"URL":[""]}],"CVE":"CVE-2023-35631","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Win32K","Type":7,"Value":"Windows Win32K"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"90","ProductStatuses":[{"ProductID":["11926","11927","12085","12086","12242","12243","12244"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Win32k Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Microsoft Threat Intelligence\nMicrosoft Security Response Center"}],"URL":[""]}],"CVE":"CVE-2023-35632","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11568"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11569"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11570"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11929"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11930"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11931"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12097"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12098"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12099"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10852"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10853"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-190","Value":"Integer Overflow or Wraparound"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Internet Connection Sharing (ICS)","Type":7,"Value":"Windows Internet Connection Sharing (ICS)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"91","ProductStatuses":[{"ProductID":["11568","11569","11570","11571","11572","11929","11930","11931","12097","12098","12099","10729","10735","10852","10853","10816","10855","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11568","11569","11570","11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11568","11569","11570","11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19044.3803","ProductID":["11929","11931"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"ProductID":["11929","11930","11931","12097","12098","12099"],"Type":6,"URL":"https://support.microsoft.com/help/5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19041.3803","ProductID":["11930"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033372"},"FixedBuild":"10.0.19045.3803","ProductID":["12097","12098","12099"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032189","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033372"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10852","10853","10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11568"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11569"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11570"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11929"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11930"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["11931"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12097"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12098"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12099"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10852"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10853"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11568"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11569"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11570"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11929"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11930"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11931"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12097"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12098"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12099"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10852"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10853"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Mateusz Jurczyk of <a href=\"https://www.google.com\">Google Project Zero</a>"}],"URL":[""]}],"CVE":"CVE-2023-35633","CVSSScoreSets":[{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10729"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10735"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p>\n<p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"92","ProductStatuses":[{"ProductID":["10729","10735","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033379"},"FixedBuild":"10.0.10240.20345","ProductID":["10729","10735"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032199","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033379"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10729"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10735"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10729"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10735"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Irwin Villalobos and Geoffrey Antos with Microsoft"}],"URL":[""]}],"CVE":"CVE-2023-35634","CVSSScoreSets":[{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11926"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11927"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"},{"BaseScore":8.0,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":7.0,"Vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-121","Value":"Stack-based Buffer Overflow"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>An unauthorized attacker could exploit the Windows Bluetooth driver vulnerability by programmatically running certain functions that could lead to remote code execution on the Bluetooth component.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p>\n<p>Exploiting this vulnerability requires an attacker to be within proximity of the target system to send and receive radio transmissions.</p>\n"},{"Ordinal":"20","Title":"Microsoft Bluetooth Driver","Type":7,"Value":"Microsoft Bluetooth Driver"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"93","ProductStatuses":[{"ProductID":["11926","11927","12085","12086","12242","12243"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"FixedBuild":"10.0.22000.2652","ProductID":["11926","11927"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032192","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033369"},"ProductID":["11926","11927"],"Type":6,"URL":"https://support.microsoft.com/help/5033369"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11926"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["11927"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Remote Code Execution"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11926"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11927"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Bluetooth Driver Remote Code Execution Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/_l4ys\">Shih-Fong Peng (@_L4ys)</a> with <a href=\"https://trapa.tw/\">TRAPA Security</a>"}],"URL":[""]}],"CVE":"CVE-2023-35635","CVSSScoreSets":[{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12085"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12086"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12242"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":5.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12243"],"TemporalScore":4.8,"Vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-125","Value":"Out-of-bounds Read"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>This vulnerability could be exploited if an authenticated user opens a specially crafted file locally or browses to that file on a network share when running an unpatched version of Windows. When the user browses or lists the maliciously crafted file that action could cause a crash of the operating system.</p>\n"},{"Ordinal":"20","Title":"Windows Kernel","Type":7,"Value":"Windows Kernel"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"94","ProductStatuses":[{"ProductID":["12085","12086","12242","12243"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22621.2861","ProductID":["12085","12086","12242"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"ProductID":["12085","12086","12242","12243"],"Type":6,"URL":"https://support.microsoft.com/help/5033375"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033375"},"FixedBuild":"10.0.22631.2861","ProductID":["12243"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032190","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033375"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12085"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12086"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12242"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12243"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12085"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12086"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12242"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12243"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows Kernel Denial of Service Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Dolev Taler with <a href=\"https://www.varonis.com/\">Varonis</a>"}],"URL":[""]}],"CVE":"CVE-2023-35636","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11573"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11574"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11762"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11763"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11952"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11953"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10753"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10754"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-200","Value":"Exposure of Sensitive Information to an Unauthorized Actor"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p>\n<p>Exploitation of the vulnerability requires that a user open a specially crafted file.</p>\n<ul>\n<li>In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted file to the user and convincing the user to open the file.</li>\n<li>In a web-based attack scenario, an attacker could host a website (or leverage a compromised website that accepts or hosts user-provided content) containing a specially crafted file designed to exploit the vulnerability.</li>\n</ul>\n<p>An attacker would have no way to force users to visit the website. Instead, an attacker would have to convince users to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p>\n<p>No, the Preview Pane is not an attack vector.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What type of information could be disclosed by this vulnerability?</strong></p>\n<p>Exploiting this vulnerability could allow the disclosure of NTLM hashes.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Outlook","Type":7,"Value":"Microsoft Office Outlook"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"95","ProductStatuses":[{"ProductID":["11573","11574","11762","11763","11952","11953","10753","10754"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Click to Run"},"FixedBuild":"https://aka.ms/OfficeSecurityReleases","ProductID":["11573","11574","11762","11763","11952","11953"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002529"},"FixedBuild":"16.0.5426.1000","ProductID":["10753"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=c3eb9d94-5256-4ae0-b2da-8cbf2d451408"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5002529"},"FixedBuild":"16.0.5426.1000","ProductID":["10754"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://www.microsoft.com/download/details.aspx?familyid=c5890da5-b002-4ba2-85be-8e8b19b8504b"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11573"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11574"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11762"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11763"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11952"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11953"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10753"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["10754"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11573"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11574"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11762"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11763"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11952"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11953"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10753"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10754"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Outlook Information Disclosure Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.linkedin.com/in/rme-infosec/\">Ryan Emmons</a> with <a href=\"https://convergetp.com/cybersecurity/\">Converge Technology Solutions</a>"}],"URL":[""]}],"CVE":"CVE-2023-35619","CVSSScoreSets":[{"BaseScore":5.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11951"],"TemporalScore":4.6,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-20","Value":"Improper Input Validation"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the nature of the spoofing?</strong></p>\n<p>An attacker could appear as a trusted user when they should not be. This could cause a user to mistakenly trust a signed email message as if it came from a legitimate user.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, Integrity (I:L) is Low. What does that mean for this vulnerability?</strong></p>\n<p>The attacker who successfully exploits the vulnerability could inject CSS (Cascading Style Sheets) into an email, which is rendered at the victim’s side when they view the email.</p>\n"},{"Ordinal":"20","Title":"Microsoft Office Outlook","Type":7,"Value":"Microsoft Office Outlook"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"96","ProductStatuses":[{"ProductID":["11951"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"16.80.23121017","ProductID":["11951"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://go.microsoft.com/fwlink/p/?linkid=831049"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11951"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11951"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Outlook for Mac Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"Andreas with <a href=\"https://microsoft.com/\">Microsoft</a>"}],"URL":[""]}],"CVE":"CVE-2023-35621","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12268"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12267"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12269"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-799","Value":"Improper Control of Interaction Frequency"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Microsoft Dynamics","Type":7,"Value":"Microsoft Dynamics"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"97","ProductStatuses":[{"ProductID":["12268","12267","12269"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"7.0.7120.46","ProductID":["12268"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/migration-upgrade/download-hotfix-lcs"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"7.0.7068.109","ProductID":["12267"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/migration-upgrade/download-hotfix-lcs"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"7.0.7036.133","ProductID":["12269"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/migration-upgrade/download-hotfix-lcs"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12268"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12267"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Denial of Service"},"ProductID":["12269"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12268"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12267"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12269"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-35622","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11571"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11572"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11923"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11924"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12244"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10816"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10855"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9312"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10287"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9318"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["9344"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10051"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10049"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10378"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10379"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10483"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["10543"],"TemporalScore":6.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Microsoft Windows DNS","Type":7,"Value":"Microsoft Windows DNS"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"98","ProductStatuses":[{"ProductID":["11571","11572","11923","11924","12244","10816","10855","9312","10287","9318","9344","10051","10049","10378","10379","10483","10543"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"FixedBuild":"10.0.17763.5206","ProductID":["11571","11572"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032196","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033371"},"ProductID":["11571","11572"],"Type":6,"URL":"https://support.microsoft.com/help/5033371"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033118"},"FixedBuild":"10.0.20348.2159","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032198","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033118"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033464"},"FixedBuild":"10.0.20348.2144","ProductID":["11923","11924"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Hotpatch Update","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033464"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033383"},"FixedBuild":"10.0.25398.584","ProductID":["12244"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032202","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033383"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033373"},"FixedBuild":"10.0.14393.6529","ProductID":["10816","10855"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Update","Supercedence":"5032197","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033373"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032254","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033422"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033422"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"FixedBuild":"6.0.6003.22413","ProductID":["9312","10287","9318","9344"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033427"},"ProductID":["9312","10287","9318","9344"],"Type":6,"URL":"https://support.microsoft.com/help/5033427"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032252","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033433"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033433"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"FixedBuild":"6.1.7601.26864","ProductID":["10051","10049"],"RestartRequired":{"Value":"Yes"},"SubType":"Security Only","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033424"},"ProductID":["10051","10049"],"Type":6,"URL":"https://support.microsoft.com/help/5033424"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033429"},"FixedBuild":"6.2.9200.24614","ProductID":["10378","10379"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032247","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033429"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"5033420"},"FixedBuild":"6.3.9600.21715","ProductID":["10483","10543"],"RestartRequired":{"Value":"Yes"},"SubType":"Monthly Rollup","Supercedence":"5032249","Type":2,"URL":"https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5033420"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11571"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11572"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11923"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["11924"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12244"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10816"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10855"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9312"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10287"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9318"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["9344"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10051"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10049"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10378"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10379"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10483"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["10543"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11571"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11572"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11923"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["11924"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12244"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10816"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10855"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9312"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10287"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9318"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["9344"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10051"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10049"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10378"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10379"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10483"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["10543"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Windows DNS Spoofing Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"R4nger & Zhiniang Peng"}],"URL":[""]}],"CVE":"CVE-2023-35624","CVSSScoreSets":[{"BaseScore":7.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12264"],"TemporalScore":6.4,"Vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-59","Value":"Improper Link Resolution Before File Access ('Link Following')"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?</strong></p>\n<p>A non-admin local user who has sufficient permissions to create symbolic links on a Windows computer that has Azure Connected Machine Agent installed (or before the agent is installed) could create links from a directory used by the agent to other privileged files on the computer. If the administrator later installs virtual machine extensions on the machine, those files could be deleted.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What privileges could an attacker gain with successful exploitation?</strong></p>\n<p>An attacker who successfully exploited the vulnerability could add symlinks and cause an arbitrary file delete as SYSTEM.</p>\n"},{"Ordinal":"20","Title":"Azure Connected Machine Agent","Type":7,"Value":"Azure Connected Machine Agent"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"99","ProductStatuses":[{"ProductID":["12264"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"1.37","ProductID":["12264"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"https://learn.microsoft.com/en-us/azure/azure-arc/servers/manage-agent?tabs=windows#upgrade-the-agent"}],"RevisionHistory":[{"Date":"2023-12-12T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Elevation of Privilege"},"ProductID":["12264"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12264"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Azure Connected Machine Agent Elevation of Privilege Vulnerability"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.chromium.org/\">Alex Gough</a> with Chrome Security Team"}],"URL":[""]}],"CVE":"CVE-2023-36880","CVSSScoreSets":[{"BaseScore":4.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":4.2,"Vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p>\n<p>Exploitation of this vulnerability only discloses limited information, no sensitive information can be obtained.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L). What does that mean for this vulnerability?</strong></p>\n<p>The attacker who successfully exploited the vulnerability could have limited ability to perform code execution.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"100","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Added FAQ to indicate the version numbers for this CVE. This is an informational change only.</p>\n"},"Number":"1.1"},{"Date":"2023-12-07T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Information Disclosure"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Information Disclosure Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-6512","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"101","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-07T18:59:06","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6512 Inappropriate implementation in Web Browser UI"}},{"Acknowledgments":[],"CVE":"CVE-2023-6511","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"102","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-07T18:59:04","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6511 Inappropriate implementation in Autofill"}},{"Acknowledgments":[],"CVE":"CVE-2023-6508","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"103","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-07T18:58:56","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6508 Use after free in Media Stream"}},{"Acknowledgments":[],"CVE":"CVE-2023-6510","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"104","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-07T18:59:02","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6510 Use after free in Media Capture"}},{"Acknowledgments":[],"CVE":"CVE-2023-6509","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.61</td>\n<td>12/7/2023</td>\n<td>120.0.6099.62/.63</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"105","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.61","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-07T18:59:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6509 Use after free in Side Panel Search"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://twitter.com/agdosil\">Anton Garcia Dosil</a>"}],"URL":[""]}],"CVE":"CVE-2023-21751","CVSSScoreSets":[{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12270"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"},{"BaseScore":6.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12143"],"TemporalScore":5.7,"Vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C"}],"CWE":[{"ID":"CWE-284","Value":"Improper Access Control"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric,privileges required is low(PR:L). What does that mean for this vulnerability?</strong></p>\n<p>This means that an attacker needs to have a user account in the organization with the ability to run builds.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>According to the CVSS metric, successful exploitation of this vulnerability could impact the integrity(I:H). What does that mean for this vulnerability?</strong></p>\n<p>Successful exploitation compromises the integrity of the build verification process, allowing an attacker to spoof and bypass verification.</p>\n"},{"Ordinal":"20","Title":"Azure DevOps","Type":7,"Value":"Azure DevOps"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"106","ProductStatuses":[{"ProductID":["12270","12143"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"20231128.1","ProductID":["12270"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":"file://cpvsbuild/drops/mseng/tfs/Dev19/releases_M225.AzureDevOps2022.1/layouts/x86ret/Tfs2018Sgn_20231128.1/enu/devops/Patch"},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"20231127.4","ProductID":["12143"],"RestartRequired":{"Value":"Maybe"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-13T08:00:00","Description":{"Value":"<p>Information published. This CVE was addressed by updates that were released in December 2023, but the CVE was inadvertently omitted from the December 2023 Security Updates. Microsoft strongly recommends that customers running affected versions of Azure DevOps Server install the December 2023 updates to be protected from this vulnerability.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12270"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Spoofing"},"ProductID":["12143"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12270"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Important"},"ProductID":["12143"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Azure DevOps Server Spoofing Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-6702","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"107","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6702 Type Confusion in V8"}},{"Acknowledgments":[],"CVE":"CVE-2023-6704","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"108","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6704 Use after free in libavif"}},{"Acknowledgments":[],"CVE":"CVE-2023-6703","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"109","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6703 Use after free in Blink"}},{"Acknowledgments":[],"CVE":"CVE-2023-6705","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"110","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6705 Use after free in WebRTC"}},{"Acknowledgments":[],"CVE":"CVE-2023-6706","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"111","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6706 Use after free in FedCM"}},{"Acknowledgments":[],"CVE":"CVE-2023-6707","CVSSScoreSets":[],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2,"Value":"<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href=\"https://chromereleases.googleblog.com/2023\">Google Chrome Releases</a> for more information.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p>\n<p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p>\n<p><strong>How can I see the version of the browser?</strong></p>\n<ol>\n<li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li>\n<li>Click on <strong>Help and Feedback</strong></li>\n<li>Click on <strong>About Microsoft Edge</strong></li>\n</ol>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Chrome","Type":8,"Value":"Chrome"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"112","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{"Value":"Chromium: CVE-2023-6707 Use after free in CSS"}},{"Acknowledgments":[{"Name":[{"Value":"<a href=\"https://www.onecategory.com\">Khiem Tran</a>"}],"URL":[""]}],"CVE":"CVE-2023-36878","CVSSScoreSets":[{"BaseScore":4.3,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["11655"],"TemporalScore":3.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong> The attacker would be able to bypass the protection in Edge that does not block <code><img></code> tags which may contain blocked websites to be loaded. If an attacker successfully exploited this vulnerability it could load a malicious image file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>How could an attacker exploit this vulnerability?</strong></p>\n<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.</p>\n<p>Additionally, an attacker could convince a local user to open a malicious file. The attacker would have to convince the user to click a link, typically by way of an enticement in an email or instant message, and then convince them to open the specially crafted file.</p>\n"},{"Ordinal":"10","Title":"FAQ","Type":4,"Value":"<p><strong>What is the version information for this release?</strong></p>\n<table>\n<thead>\n<tr>\n<th>Microsoft Edge Version</th>\n<th>Date Released</th>\n<th>Based on Chromium Version</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>120.0.2210.77</td>\n<td>12/14/2023</td>\n<td>120.0.6099.109</td>\n</tr>\n</tbody>\n</table>\n"},{"Ordinal":"20","Title":"Microsoft Edge (Chromium-based)","Type":7,"Value":"Microsoft Edge (Chromium-based)"},{"Ordinal":"30","Title":"Microsoft","Type":8,"Value":"Microsoft"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"113","ProductStatuses":[{"ProductID":["11655"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Release Notes"},"FixedBuild":"120.0.2210.77","ProductID":["11655"],"RestartRequired":{"Value":"No"},"SubType":"Security Update","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-14T08:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Security Feature Bypass"},"ProductID":["11655"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Low"},"ProductID":["11655"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A"},"Type":1}],"Title":{"Value":"Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability"}},{"Acknowledgments":[],"CVE":"CVE-2023-48105","CVSSScoreSets":[{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"BaseScore":7.5,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":7.5,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-48105"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2023-48105"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"cve@mitre.org","Type":8,"Value":"cve@mitre.org"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"114","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"fluent-bit-2.1.10-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"fluent-bit-devel-2.1.10-2.cm2.x86_64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"fluent-bit-debuginfo-2.1.10-2.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"fluent-bit"},"FixedBuild":"2.1.10-2","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"fluent-bit-2.1.10-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"fluent-bit-devel-2.1.10-2.cm2.aarch64.rpm"},{"FileLastModified":"0001-01-01T00:00:00","FileName":"fluent-bit-debuginfo-2.1.10-2.cm2.aarch64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"fluent-bit"},"FixedBuild":"2.1.10-2","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-05T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{}},{"Acknowledgments":[],"CVE":"CVE-2022-26592","CVSSScoreSets":[{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12139"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"BaseScore":8.8,"EnvironmentalScore":0,"IsTemporalScoreFieldSpecified":false,"ProductID":["12140"],"TemporalScore":8.8,"Vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"DiscoveryDate":"0001-01-01T00:00:00","DiscoveryDateSpecified":false,"Notes":[{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2022-26592"},{"Ordinal":"1","Title":"NIST NVD Details","Type":6,"Value":"https://nvd.nist.gov/vuln/detail/CVE-2022-26592"},{"Ordinal":"0","Title":"Description","Type":2},{"Ordinal":"20","Title":"Mariner","Type":7,"Value":"Mariner"},{"Ordinal":"30","Title":"cve@mitre.org","Type":8,"Value":"cve@mitre.org"},{"Ordinal":"40","Title":"Customer Action Required","Type":6,"Value":"Yes"}],"Ordinal":"115","ProductStatuses":[{"ProductID":["12139","12140"],"Type":3}],"ReleaseDate":"0001-01-01T00:00:00","ReleaseDateSpecified":false,"Remediations":[{"AffectedFiles":[{"FileLastModified":"0001-01-01T00:00:00","FileName":"reaper-3.1.1-9.cm2.x86_64.rpm"}],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"reaper"},"FixedBuild":"3.1.1-9","ProductID":["12139"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""},{"AffectedFiles":[],"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"reaper"},"FixedBuild":"3.1.1-9","ProductID":["12140"],"RestartRequired":{},"SubType":"CBL-Mariner","Type":2,"URL":""}],"RevisionHistory":[{"Date":"2023-12-27T00:00:00","Description":{"Value":"<p>Information published.</p>\n"},"Number":"1.0"}],"Threats":[{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":0},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12139"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{},"ProductID":["12140"],"Type":3},{"Date":"0001-01-01T00:00:00","DateSpecified":false,"Description":{"Value":"DOS:N/A"},"Type":1}],"Title":{}}]}
|