# Vulnerabilities published in 2023


- [CVE-2023-21800](https://insights.sbomify.com/CVE-2023-21800/): Windows Installer Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-2180](https://insights.sbomify.com/CVE-2023-2180/): KIWIZ Invoices Certification & PDF System <= 2.1.3 - Unauthenticated Arbitrary File Download (high 7.5)
- [CVE-2023-21799](https://insights.sbomify.com/CVE-2023-21799/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21798](https://insights.sbomify.com/CVE-2023-21798/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21797](https://insights.sbomify.com/CVE-2023-21797/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21796](https://insights.sbomify.com/CVE-2023-21796/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2023-21795](https://insights.sbomify.com/CVE-2023-21795/): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (high 8.3)
- [CVE-2023-21794](https://insights.sbomify.com/CVE-2023-21794/): Microsoft Edge (Chromium-based) Spoofing Vulnerability (medium 4.3)
- [CVE-2023-21793](https://insights.sbomify.com/CVE-2023-21793/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21792](https://insights.sbomify.com/CVE-2023-21792/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21791](https://insights.sbomify.com/CVE-2023-21791/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21790](https://insights.sbomify.com/CVE-2023-21790/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2179](https://insights.sbomify.com/CVE-2023-2179/): WooCommerce Order Status Change Notifier <= 1.1.0 - Subscriber+ Arbitrary Order Status Update (medium 6.5)
- [CVE-2023-21789](https://insights.sbomify.com/CVE-2023-21789/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21788](https://insights.sbomify.com/CVE-2023-21788/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21787](https://insights.sbomify.com/CVE-2023-21787/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21786](https://insights.sbomify.com/CVE-2023-21786/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21785](https://insights.sbomify.com/CVE-2023-21785/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21784](https://insights.sbomify.com/CVE-2023-21784/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21783](https://insights.sbomify.com/CVE-2023-21783/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21782](https://insights.sbomify.com/CVE-2023-21782/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21781](https://insights.sbomify.com/CVE-2023-21781/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21780](https://insights.sbomify.com/CVE-2023-21780/): 3D Builder Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2178](https://insights.sbomify.com/CVE-2023-2178/): Aajoda Testimonials < 2.2.2 - Admin+ Stored XSS (medium 4.8)
- [CVE-2023-21779](https://insights.sbomify.com/CVE-2023-21779/): Visual Studio Code Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21778](https://insights.sbomify.com/CVE-2023-21778/): Microsoft Dynamics Unified Service Desk Remote Code Execution Vulnerability (high 8.0)
- [CVE-2023-21777](https://insights.sbomify.com/CVE-2023-21777/): Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability (high 8.7)
- [CVE-2023-21776](https://insights.sbomify.com/CVE-2023-21776/): Windows Kernel Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21775](https://insights.sbomify.com/CVE-2023-21775/): Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (high 8.3)
- [CVE-2023-21774](https://insights.sbomify.com/CVE-2023-21774/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21773](https://insights.sbomify.com/CVE-2023-21773/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21772](https://insights.sbomify.com/CVE-2023-21772/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21771](https://insights.sbomify.com/CVE-2023-21771/): Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-2177](https://insights.sbomify.com/CVE-2023-2177/): Null dereference in Linux (medium 5.5)
- [CVE-2023-21769](https://insights.sbomify.com/CVE-2023-21769/): Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21768](https://insights.sbomify.com/CVE-2023-21768/): Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21767](https://insights.sbomify.com/CVE-2023-21767/): Windows Overlay Filter Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21766](https://insights.sbomify.com/CVE-2023-21766/): Windows Overlay Filter Information Disclosure Vulnerability (medium 4.7)
- [CVE-2023-21765](https://insights.sbomify.com/CVE-2023-21765/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21764](https://insights.sbomify.com/CVE-2023-21764/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21763](https://insights.sbomify.com/CVE-2023-21763/): Microsoft Exchange Server Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21762](https://insights.sbomify.com/CVE-2023-21762/): Microsoft Exchange Server Spoofing Vulnerability (high 8.0)
- [CVE-2023-21761](https://insights.sbomify.com/CVE-2023-21761/): Microsoft Exchange Server Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-21760](https://insights.sbomify.com/CVE-2023-21760/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2023-2176](https://insights.sbomify.com/CVE-2023-2176/): Memory corruption in Kernel (high 7.8)
- [CVE-2023-21759](https://insights.sbomify.com/CVE-2023-21759/): Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability (low 3.3)
- [CVE-2023-21758](https://insights.sbomify.com/CVE-2023-21758/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21757](https://insights.sbomify.com/CVE-2023-21757/): Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21756](https://insights.sbomify.com/CVE-2023-21756/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21755](https://insights.sbomify.com/CVE-2023-21755/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21754](https://insights.sbomify.com/CVE-2023-21754/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21753](https://insights.sbomify.com/CVE-2023-21753/): Event Tracing for Windows Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21752](https://insights.sbomify.com/CVE-2023-21752/): Windows Backup Service Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2023-21751](https://insights.sbomify.com/CVE-2023-21751/): Azure DevOps Server Spoofing Vulnerability (medium 6.5)
- [CVE-2023-21750](https://insights.sbomify.com/CVE-2023-21750/): Windows Kernel Elevation of Privilege Vulnerability (high 7.1)
- [CVE-2023-21749](https://insights.sbomify.com/CVE-2023-21749/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21748](https://insights.sbomify.com/CVE-2023-21748/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21747](https://insights.sbomify.com/CVE-2023-21747/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21746](https://insights.sbomify.com/CVE-2023-21746/): Windows NTLM Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21745](https://insights.sbomify.com/CVE-2023-21745/): Microsoft Exchange Server Spoofing Vulnerability (high 8.0)
- [CVE-2023-21744](https://insights.sbomify.com/CVE-2023-21744/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21743](https://insights.sbomify.com/CVE-2023-21743/): Microsoft SharePoint Server Security Feature Bypass Vulnerability (medium 5.3)
- [CVE-2023-21742](https://insights.sbomify.com/CVE-2023-21742/): Microsoft SharePoint Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21741](https://insights.sbomify.com/CVE-2023-21741/): Microsoft Office Visio Information Disclosure Vulnerability (high 7.1)
- [CVE-2023-21740](https://insights.sbomify.com/CVE-2023-21740/): Windows Media Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-2174](https://insights.sbomify.com/CVE-2023-2174/): BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries (medium 4.3)
- [CVE-2023-21739](https://insights.sbomify.com/CVE-2023-21739/): Windows Bluetooth Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-21738](https://insights.sbomify.com/CVE-2023-21738/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21737](https://insights.sbomify.com/CVE-2023-21737/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21736](https://insights.sbomify.com/CVE-2023-21736/): Microsoft Office Visio Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21735](https://insights.sbomify.com/CVE-2023-21735/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21734](https://insights.sbomify.com/CVE-2023-21734/): Microsoft Office Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21733](https://insights.sbomify.com/CVE-2023-21733/): Windows Bind Filter Driver Elevation of Privilege Vulnerability (high 7.0)
- [CVE-2023-21732](https://insights.sbomify.com/CVE-2023-21732/): Microsoft ODBC Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21730](https://insights.sbomify.com/CVE-2023-21730/): Microsoft Cryptographic Services Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-2173](https://insights.sbomify.com/CVE-2023-2173/): BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion (medium 6.5)
- [CVE-2023-21729](https://insights.sbomify.com/CVE-2023-21729/): Remote Procedure Call Runtime Information Disclosure Vulnerability (medium 4.3)
- [CVE-2023-21728](https://insights.sbomify.com/CVE-2023-21728/): Windows Netlogon Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21727](https://insights.sbomify.com/CVE-2023-21727/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21726](https://insights.sbomify.com/CVE-2023-21726/): Windows Credential Manager User Interface Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21725](https://insights.sbomify.com/CVE-2023-21725/): Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability (medium 6.3)
- [CVE-2023-21724](https://insights.sbomify.com/CVE-2023-21724/): Microsoft DWM Core Library Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21722](https://insights.sbomify.com/CVE-2023-21722/): .NET Framework Denial of Service Vulnerability (medium 5.0)
- [CVE-2023-21721](https://insights.sbomify.com/CVE-2023-21721/): Microsoft OneNote Elevation of Privilege Vulnerability (medium 6.5)
- [CVE-2023-21720](https://insights.sbomify.com/CVE-2023-21720/): Microsoft Edge (Chromium-based) Tampering Vulnerability (medium 5.3)
- [CVE-2023-2172](https://insights.sbomify.com/CVE-2023-2172/): BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Title Overwrite (medium 4.3)
- [CVE-2023-21719](https://insights.sbomify.com/CVE-2023-21719/): Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability (medium 6.5)
- [CVE-2023-21718](https://insights.sbomify.com/CVE-2023-21718/): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21717](https://insights.sbomify.com/CVE-2023-21717/): Microsoft SharePoint Server Elevation of Privilege Vulnerability (high 8.8)
- [CVE-2023-21716](https://insights.sbomify.com/CVE-2023-21716/): Microsoft Word Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21715](https://insights.sbomify.com/CVE-2023-21715/): Microsoft Office Publisher Security Feature Bypass (high 7.3, exploited in the wild)
- [CVE-2023-21714](https://insights.sbomify.com/CVE-2023-21714/): Microsoft Office Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21713](https://insights.sbomify.com/CVE-2023-21713/): Microsoft SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21712](https://insights.sbomify.com/CVE-2023-21712/): Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21710](https://insights.sbomify.com/CVE-2023-21710/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 7.2)
- [CVE-2023-2171](https://insights.sbomify.com/CVE-2023-2171/): BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (medium 5.4)
- [CVE-2023-21709](https://insights.sbomify.com/CVE-2023-21709/): Microsoft Exchange Server Elevation of Privilege Vulnerability (critical 9.8)
- [CVE-2023-21708](https://insights.sbomify.com/CVE-2023-21708/): Remote Procedure Call Runtime Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21707](https://insights.sbomify.com/CVE-2023-21707/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21706](https://insights.sbomify.com/CVE-2023-21706/): Microsoft Exchange Server Remote Code Execution Vulnerability (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/395/