CVEs published in March 2023
2,723 vulnerabilities, 268 critical, 14 exploited.
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +16 more +18 moreWindows Partition Management Driver Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Cryptographic Services Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreInternet Control Message Protocol (ICMP) Remote Code Execution Vulnerability9.8 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +18 more +20 moreWindows Accounts Picture Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +17 more +19 moreWindows Hyper-V Denial of Service Vulnerability6.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows HTTP.sys Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreClient Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability5.5 Medium
- microsoft azure hdinsightAzure Apache Ambari Spoofing Vulnerability4.5 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability7.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreWindows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +25 more +27 moreWindows Media Remote Code Execution Vulnerability7.8 High
- microsoft windows server 2012 r2, windows server 2012 r2 (server core installation), windows server 2016 +5 more +7 moreWindows DNS Server Remote Code Execution Vulnerability7.2 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreRemote Procedure Call Runtime Remote Code Execution Vulnerability9.8 Critical
- microsoft onedrive, onedrive for macos installer +1 moreMicrosoft OneDrive for MacOS Elevation of Privilege Vulnerability7.8 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft onedrive, onedrive for android +1 moreMicrosoft OneDrive for Android Information Disclosure Vulnerability5.5 Medium
- microsoft onedrive, onedrive for android +1 moreMicrosoft OneDrive for Android Information Disclosure Vulnerability5.5 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability6.5 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.0, dynamics 365 (on-premises) version 9.1 +2 moreMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability5.4 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability7.5 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +22 more +24 moreMicrosoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability8.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +13 more +15 moreMicrosoft Excel Remote Code Execution Vulnerability7.8 High
- microsoft excel, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Excel Spoofing Vulnerability7.1 High
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 moreMicrosoft Outlook Elevation of Privilege Vulnerability9.8 Critical
- microsoft office online server, office web apps server 2013 service pack 1, office web apps server +2 moreMicrosoft Excel Denial of Service Vulnerability6.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2013 service pack 1, sharepoint enterprise server 2016 +4 more +6 moreMicrosoft SharePoint Server Spoofing Vulnerability3.1 Low
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreClient Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1809, windows 10 version 20h2, windows 10 version 21h2 +12 more +14 moreWindows BrokerInfrastructure Service Elevation of Privilege Vulnerability7.0 High
- microsoft windows 11 version 21h2, windows 11 version 22h2, windows server 2022 +2 more +4 moreHTTP Protocol Stack Remote Code Execution Vulnerability9.8 Critical
- microsoft office for android, 365 copilot +1 moreOffice for Android Spoofing Vulnerability5.5 Medium
- microsoft malware protection engineMicrosoft Defender Elevation of Privilege Vulnerability6.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 20h2 +17 more +19 moreWindows Bluetooth Driver Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +28 more +30 moreWindows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability7.0 High
- microsoft azure service fabric 9.0 for linux, azure service fabric 9.0 for windows, azure service fabric 9.1 for ubuntu +2 more +4 moreService Fabric Explorer Spoofing Vulnerability8.2 High
- protobuf, google.golang.org/protobuf google.golang.org/protobuf/encoding/prototext, google.golang.org/protobuf/internal/encoding/text +2 morePanic when parsing invalid messages in google.golang.org/protobuf7.5 High
- combodo itopCombodo iTop's weak password reset token leads to account takeover7.4 High
- combodo itopAuthenticated users of Combodo iTop can take over any account9.6 Critical
- mozilla firefoxMozilla developers and community members Calixte Denizet, Gabriele Svelto, Andrew McCreight, and...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMozilla developers Timothy Nikkel, Andrew McCreight, and the Mozilla Fuzzing Team reported memory...8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreDragging a URL from a cross-origin iframe that was removed during the drag could have led to user...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhen downloading files through the Save As dialog on Windows with suggested filenames containing...6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreWhile implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic...8.8 High
- Show moreLoading…