Security Vulnerabilities - CVEs Published In December 2023
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.006
Published
2023-12-12
Windows DNS Spoofing Vulnerability
CVSS Score
7.5
EPSS Score
0.003
Published
2023-12-12
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVSS Score
7.3
EPSS Score
0.003
Published
2023-12-12
Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability
CVSS Score
4.7
EPSS Score
0.007
Published
2023-12-12
Windows MSHTML Platform Remote Code Execution Vulnerability
CVSS Score
8.1
EPSS Score
0.171
Published
2023-12-12
Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability
CVSS Score
6.8
EPSS Score
0.002
Published
2023-12-12
A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to send packets with another VPN user's source IP address. This vulnerability is due to improper validation of the packet's inner source IP address after decryption. An attacker could exploit this vulnerability by sending crafted packets through the tunnel. A successful exploit could allow the attacker to send a packet impersonating another VPN user's IP address. It is not possible for the attacker to receive return packets.
CVSS Score
4.1
EPSS Score
0.001
Published
2023-12-12
Windows Media Remote Code Execution Vulnerability
CVSS Score
7.8
EPSS Score
0.004
Published
2023-12-12
Microsoft Outlook for Mac Spoofing Vulnerability
CVSS Score
5.3
EPSS Score
0.014
Published
2023-12-12
Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.3.0, Backoffice users with send for approval permission but not publish permission are able to publish in some scenarios. Versions 8.18.10, 10.7.0, and 12.3.0 contains a patch for this issue. No known workarounds are available.
CVSS Score
4.3
EPSS Score
0.001
Published
2023-12-12