# Vulnerabilities published in 2023


- [CVE-2023-35386](https://insights.sbomify.com/CVE-2023-35386/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35385](https://insights.sbomify.com/CVE-2023-35385/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-35384](https://insights.sbomify.com/CVE-2023-35384/): Windows HTML Platforms Security Feature Bypass Vulnerability (medium 5.4)
- [CVE-2023-35383](https://insights.sbomify.com/CVE-2023-35383/): Microsoft Message Queuing Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-35382](https://insights.sbomify.com/CVE-2023-35382/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35381](https://insights.sbomify.com/CVE-2023-35381/): Windows Fax Service Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35380](https://insights.sbomify.com/CVE-2023-35380/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-3538](https://insights.sbomify.com/CVE-2023-3538/): SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-35379](https://insights.sbomify.com/CVE-2023-35379/): Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35378](https://insights.sbomify.com/CVE-2023-35378/): Windows Projected File System Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-35377](https://insights.sbomify.com/CVE-2023-35377/): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35376](https://insights.sbomify.com/CVE-2023-35376/): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35374](https://insights.sbomify.com/CVE-2023-35374/): Paint 3D Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35373](https://insights.sbomify.com/CVE-2023-35373/): Mono Authenticode Validation Spoofing Vulnerability (medium 5.3)
- [CVE-2023-35372](https://insights.sbomify.com/CVE-2023-35372/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35371](https://insights.sbomify.com/CVE-2023-35371/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-3537](https://insights.sbomify.com/CVE-2023-3537/): SimplePHPscripts News Script PHP Pro URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-35368](https://insights.sbomify.com/CVE-2023-35368/): Microsoft Exchange Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35367](https://insights.sbomify.com/CVE-2023-35367/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-35366](https://insights.sbomify.com/CVE-2023-35366/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-35365](https://insights.sbomify.com/CVE-2023-35365/): Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-35364](https://insights.sbomify.com/CVE-2023-35364/): Windows Kernel Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2023-35363](https://insights.sbomify.com/CVE-2023-35363/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35362](https://insights.sbomify.com/CVE-2023-35362/): Windows Clip Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35361](https://insights.sbomify.com/CVE-2023-35361/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-35360](https://insights.sbomify.com/CVE-2023-35360/): Windows Kernel Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-3536](https://insights.sbomify.com/CVE-2023-3536/): SimplePHPscripts Funeral Script PHP URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-35359](https://insights.sbomify.com/CVE-2023-35359/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35358](https://insights.sbomify.com/CVE-2023-35358/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35357](https://insights.sbomify.com/CVE-2023-35357/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35356](https://insights.sbomify.com/CVE-2023-35356/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35355](https://insights.sbomify.com/CVE-2023-35355/): Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35353](https://insights.sbomify.com/CVE-2023-35353/): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35352](https://insights.sbomify.com/CVE-2023-35352/): Windows Remote Desktop Security Feature Bypass Vulnerability (high 7.5)
- [CVE-2023-35351](https://insights.sbomify.com/CVE-2023-35351/): Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2023-35350](https://insights.sbomify.com/CVE-2023-35350/): Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-3535](https://insights.sbomify.com/CVE-2023-3535/): SimplePHPscripts FAQ Script PHP URL Parameter preview.php cross site scripting (low 3.5)
- [CVE-2023-35349](https://insights.sbomify.com/CVE-2023-35349/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-35348](https://insights.sbomify.com/CVE-2023-35348/): Active Directory Federation Service Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2023-35347](https://insights.sbomify.com/CVE-2023-35347/): Microsoft Install Service Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2023-35346](https://insights.sbomify.com/CVE-2023-35346/): Windows DNS Server Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2023-35345](https://insights.sbomify.com/CVE-2023-35345/): Windows DNS Server Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2023-35344](https://insights.sbomify.com/CVE-2023-35344/): Windows DNS Server Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2023-35343](https://insights.sbomify.com/CVE-2023-35343/): Windows Geolocation Service Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35342](https://insights.sbomify.com/CVE-2023-35342/): Windows Image Acquisition Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35341](https://insights.sbomify.com/CVE-2023-35341/): Microsoft DirectMusic Information Disclosure Vulnerability (medium 6.2)
- [CVE-2023-35340](https://insights.sbomify.com/CVE-2023-35340/): Windows CNG Key Isolation Service Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-3534](https://insights.sbomify.com/CVE-2023-3534/): SourceCodester Shopping Website check_availability.php sql injection (medium 6.3)
- [CVE-2023-35339](https://insights.sbomify.com/CVE-2023-35339/): Windows CryptoAPI Denial of Service Vulnerability (high 7.5)
- [CVE-2023-35338](https://insights.sbomify.com/CVE-2023-35338/): Windows Peer Name Resolution Protocol Denial of Service Vulnerability (high 7.5)
- [CVE-2023-35337](https://insights.sbomify.com/CVE-2023-35337/): Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35336](https://insights.sbomify.com/CVE-2023-35336/): Windows MSHTML Platform Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2023-35335](https://insights.sbomify.com/CVE-2023-35335/): Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability (high 8.2)
- [CVE-2023-35333](https://insights.sbomify.com/CVE-2023-35333/): MediaWiki PandocUpload Extension Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35332](https://insights.sbomify.com/CVE-2023-35332/): Windows Remote Desktop Protocol Security Feature Bypass (medium 6.8)
- [CVE-2023-35331](https://insights.sbomify.com/CVE-2023-35331/): Windows Local Security Authority (LSA) Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35330](https://insights.sbomify.com/CVE-2023-35330/): Windows Extended Negotiation Denial of Service Vulnerability (high 7.5)
- [CVE-2023-3533](https://insights.sbomify.com/CVE-2023-3533/): Chamilo LMS Unauthenticated Remote Code Execution via Arbitrary File Write (critical 9.8)
- [CVE-2023-35329](https://insights.sbomify.com/CVE-2023-35329/): Windows Authentication Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35328](https://insights.sbomify.com/CVE-2023-35328/): Windows Transaction Manager Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35326](https://insights.sbomify.com/CVE-2023-35326/): Windows CDP User Components Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-35325](https://insights.sbomify.com/CVE-2023-35325/): Windows Print Spooler Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-35324](https://insights.sbomify.com/CVE-2023-35324/): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-35323](https://insights.sbomify.com/CVE-2023-35323/): Windows OLE Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35322](https://insights.sbomify.com/CVE-2023-35322/): Windows Deployment Services Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35321](https://insights.sbomify.com/CVE-2023-35321/): Windows Deployment Services Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35320](https://insights.sbomify.com/CVE-2023-35320/): Connected User Experiences and Telemetry Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-3532](https://insights.sbomify.com/CVE-2023-3532/): Cross-site Scripting (XSS) - Stored in outline/outline (high 8.5)
- [CVE-2023-35319](https://insights.sbomify.com/CVE-2023-35319/): Remote Procedure Call Runtime Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35318](https://insights.sbomify.com/CVE-2023-35318/): Remote Procedure Call Runtime Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35317](https://insights.sbomify.com/CVE-2023-35317/): Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35316](https://insights.sbomify.com/CVE-2023-35316/): Remote Procedure Call Runtime Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-35315](https://insights.sbomify.com/CVE-2023-35315/): Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35314](https://insights.sbomify.com/CVE-2023-35314/): Remote Procedure Call Runtime Denial of Service Vulnerability (medium 6.5)
- [CVE-2023-35313](https://insights.sbomify.com/CVE-2023-35313/): Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-35312](https://insights.sbomify.com/CVE-2023-35312/): Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35311](https://insights.sbomify.com/CVE-2023-35311/): Microsoft Outlook Security Feature Bypass (high 8.8, exploited in the wild)
- [CVE-2023-35310](https://insights.sbomify.com/CVE-2023-35310/): Windows DNS Server Remote Code Execution Vulnerability (medium 6.6)
- [CVE-2023-3531](https://insights.sbomify.com/CVE-2023-3531/): Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass (high 8.1)
- [CVE-2023-35309](https://insights.sbomify.com/CVE-2023-35309/): Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-35308](https://insights.sbomify.com/CVE-2023-35308/): Windows MSHTML Platform Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2023-35306](https://insights.sbomify.com/CVE-2023-35306/): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-35305](https://insights.sbomify.com/CVE-2023-35305/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35304](https://insights.sbomify.com/CVE-2023-35304/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35303](https://insights.sbomify.com/CVE-2023-35303/): USB Audio Class System Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35302](https://insights.sbomify.com/CVE-2023-35302/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35300](https://insights.sbomify.com/CVE-2023-35300/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-35299](https://insights.sbomify.com/CVE-2023-35299/): Windows Common Log File System Driver Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-35298](https://insights.sbomify.com/CVE-2023-35298/): HTTP.sys Denial of Service Vulnerability (high 7.5)
- [CVE-2023-35297](https://insights.sbomify.com/CVE-2023-35297/): Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-35296](https://insights.sbomify.com/CVE-2023-35296/): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (medium 6.5)
- [CVE-2023-3529](https://insights.sbomify.com/CVE-2023-3529/): Rotem Dynamics Rotem CRM OTP URI Interface information exposure (medium 5.3)
- [CVE-2023-3528](https://insights.sbomify.com/CVE-2023-3528/): ThinuTech ThinuCMS category.php sql injection (medium 6.3)
- [CVE-2023-3527](https://insights.sbomify.com/CVE-2023-3527/): Avaya Call Management System CSV injection vulnerability (medium 6.8)
- [CVE-2023-3526](https://insights.sbomify.com/CVE-2023-3526/): PHOENIX CONTACT: Cross-site Scripting vulnerability in TC ROUTER, TC CLOUD CLIENT and CLOUD CLIENT devices (critical 9.6)
- [CVE-2023-3525](https://insights.sbomify.com/CVE-2023-3525/): Missing authorization in Getnet Argentina para Woocommerce (high 7.5)
- [CVE-2023-3524](https://insights.sbomify.com/CVE-2023-3524/): WPCode < 2.0.13.1 - Reflected XSS (medium 6.1)
- [CVE-2023-3523](https://insights.sbomify.com/CVE-2023-3523/): Out-of-bounds Read in gpac/gpac (medium 6.1)
- [CVE-2023-3522](https://insights.sbomify.com/CVE-2023-3522/): SQLi in a2 License Portal System (critical 9.8)
- [CVE-2023-3521](https://insights.sbomify.com/CVE-2023-3521/): Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/287/