# Vulnerabilities published in 2023


- [CVE-2023-21705](https://insights.sbomify.com/CVE-2023-21705/): Microsoft SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21704](https://insights.sbomify.com/CVE-2023-21704/): Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21703](https://insights.sbomify.com/CVE-2023-21703/): Azure Data Box Gateway Remote Code Execution Vulnerability (medium 6.5)
- [CVE-2023-21702](https://insights.sbomify.com/CVE-2023-21702/): Windows iSCSI Service Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21701](https://insights.sbomify.com/CVE-2023-21701/): Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21700](https://insights.sbomify.com/CVE-2023-21700/): Windows iSCSI Discovery Service Denial of Service Vulnerability (high 7.5)
- [CVE-2023-2170](https://insights.sbomify.com/CVE-2023-2170/): TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting (medium 5.5)
- [CVE-2023-21699](https://insights.sbomify.com/CVE-2023-21699/): Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability (medium 5.3)
- [CVE-2023-21697](https://insights.sbomify.com/CVE-2023-21697/): Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability (medium 6.2)
- [CVE-2023-21695](https://insights.sbomify.com/CVE-2023-21695/): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (high 7.5)
- [CVE-2023-21694](https://insights.sbomify.com/CVE-2023-21694/): Windows Fax Service Remote Code Execution Vulnerability (medium 6.8)
- [CVE-2023-21693](https://insights.sbomify.com/CVE-2023-21693/): Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability (medium 5.7)
- [CVE-2023-21692](https://insights.sbomify.com/CVE-2023-21692/): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21691](https://insights.sbomify.com/CVE-2023-21691/): Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability (high 7.5)
- [CVE-2023-21690](https://insights.sbomify.com/CVE-2023-21690/): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-2169](https://insights.sbomify.com/CVE-2023-2169/): TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting (medium 5.5)
- [CVE-2023-21689](https://insights.sbomify.com/CVE-2023-21689/): Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability (critical 9.8)
- [CVE-2023-21688](https://insights.sbomify.com/CVE-2023-21688/): NT OS Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21687](https://insights.sbomify.com/CVE-2023-21687/): HTTP.sys Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21686](https://insights.sbomify.com/CVE-2023-21686/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21685](https://insights.sbomify.com/CVE-2023-21685/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21684](https://insights.sbomify.com/CVE-2023-21684/): Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21683](https://insights.sbomify.com/CVE-2023-21683/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21682](https://insights.sbomify.com/CVE-2023-21682/): Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability (medium 5.3)
- [CVE-2023-21681](https://insights.sbomify.com/CVE-2023-21681/): Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21680](https://insights.sbomify.com/CVE-2023-21680/): Windows Win32k Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-2168](https://insights.sbomify.com/CVE-2023-2168/): TaxoPress <= 3.6.4 - Authenticated (Editor+) Stored Cross-Site Scripting (medium 5.5)
- [CVE-2023-21679](https://insights.sbomify.com/CVE-2023-21679/): Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability (high 8.1)
- [CVE-2023-21678](https://insights.sbomify.com/CVE-2023-21678/): Windows Print Spooler Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21677](https://insights.sbomify.com/CVE-2023-21677/): Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability (high 7.5)
- [CVE-2023-21676](https://insights.sbomify.com/CVE-2023-21676/): Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability (high 8.8)
- [CVE-2023-21675](https://insights.sbomify.com/CVE-2023-21675/): Windows Kernel Elevation of Privilege Vulnerability (high 7.8)
- [CVE-2023-21674](https://insights.sbomify.com/CVE-2023-21674/): Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2023-21673](https://insights.sbomify.com/CVE-2023-21673/): Improper Access Control in Kernel (high 8.7)
- [CVE-2023-21672](https://insights.sbomify.com/CVE-2023-21672/): Use After Free in Audio (high 8.4)
- [CVE-2023-21671](https://insights.sbomify.com/CVE-2023-21671/): Improper Input Validation in Core (critical 9.3)
- [CVE-2023-21670](https://insights.sbomify.com/CVE-2023-21670/): Improper Access control in GPU Subsystem (high 7.8)
- [CVE-2023-21669](https://insights.sbomify.com/CVE-2023-21669/): Buffer Over-read in WLAN HOST (high 8.2)
- [CVE-2023-21667](https://insights.sbomify.com/CVE-2023-21667/): Buffer Over-read in Bluetooth HOST (medium 6.5)
- [CVE-2023-21666](https://insights.sbomify.com/CVE-2023-21666/): Improper Release of Memory Before Removing Last Reference (`Memory Leak`) in Graphics (high 8.4)
- [CVE-2023-21665](https://insights.sbomify.com/CVE-2023-21665/): Incorrect Type Conversion or Cast in Graphics (high 8.4)
- [CVE-2023-21664](https://insights.sbomify.com/CVE-2023-21664/): Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform (high 7.8)
- [CVE-2023-21663](https://insights.sbomify.com/CVE-2023-21663/): Improper Restrictions of Operations within the Bounds of a Memory Buffer in Display (medium 6.7)
- [CVE-2023-21662](https://insights.sbomify.com/CVE-2023-21662/): Buffer Copy without Checking the Size of Input(Classic Buffer Overflow) in Core Platform (high 7.8)
- [CVE-2023-21661](https://insights.sbomify.com/CVE-2023-21661/): Buffer Over-read in WLAN Firmware (high 7.5)
- [CVE-2023-21660](https://insights.sbomify.com/CVE-2023-21660/): Buffer Over-read in WLAN Firmware (high 7.5)
- [CVE-2023-2166](https://insights.sbomify.com/CVE-2023-2166/): Null dereference in Linux (medium 5.5)
- [CVE-2023-21659](https://insights.sbomify.com/CVE-2023-21659/): Buffer Over-read in WLAN Firmware (high 7.5)
- [CVE-2023-21658](https://insights.sbomify.com/CVE-2023-21658/): Buffer Over-Read in WLAN Firmware (high 7.5)
- [CVE-2023-21657](https://insights.sbomify.com/CVE-2023-21657/): Improper Input Validation in Audio (high 7.8)
- [CVE-2023-21656](https://insights.sbomify.com/CVE-2023-21656/): Improper Input Validation in WLAN HOST (high 7.8)
- [CVE-2023-21655](https://insights.sbomify.com/CVE-2023-21655/): Integer Overflow or Wraparound in Display (medium 6.7)
- [CVE-2023-21654](https://insights.sbomify.com/CVE-2023-21654/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Audio (medium 6.7)
- [CVE-2023-21653](https://insights.sbomify.com/CVE-2023-21653/): Reachable Assertion in Modem (high 7.5)
- [CVE-2023-21652](https://insights.sbomify.com/CVE-2023-21652/): Key Management Errors in HLOS (high 7.7)
- [CVE-2023-21651](https://insights.sbomify.com/CVE-2023-21651/): Incorrect Type Conversion or Cast in Core (critical 9.3)
- [CVE-2023-21650](https://insights.sbomify.com/CVE-2023-21650/): Improper Validation of Array Index in GPS HLOS Driver (medium 6.7)
- [CVE-2023-21649](https://insights.sbomify.com/CVE-2023-21649/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN (medium 6.7)
- [CVE-2023-21648](https://insights.sbomify.com/CVE-2023-21648/): Integer Overflow to Buffer Overflow in RIL (medium 6.7)
- [CVE-2023-21647](https://insights.sbomify.com/CVE-2023-21647/): Improper Input Validation in Bluetooth HOST (medium 6.5)
- [CVE-2023-21646](https://insights.sbomify.com/CVE-2023-21646/): Reachable Assertion in Modem (high 7.5)
- [CVE-2023-21644](https://insights.sbomify.com/CVE-2023-21644/): Integer Overflow to Buffer Overflow in RIL (medium 6.7)
- [CVE-2023-21643](https://insights.sbomify.com/CVE-2023-21643/): Untrusted Pointer Dereference in Automotive (critical 9.1)
- [CVE-2023-21642](https://insights.sbomify.com/CVE-2023-21642/): Improper Access Control in HAB Memory Management (high 8.4)
- [CVE-2023-21641](https://insights.sbomify.com/CVE-2023-21641/): Permissions, Privileges, and Access Controls in Display (medium 6.6)
- [CVE-2023-21640](https://insights.sbomify.com/CVE-2023-21640/): Buffer Copy Without Checking Size of Input in Linux (medium 6.7)
- [CVE-2023-2164](https://insights.sbomify.com/CVE-2023-2164/): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab (medium 5.4)
- [CVE-2023-21639](https://insights.sbomify.com/CVE-2023-21639/): Buffer Copy Without Checking the Size of Input in Audio (medium 6.7)
- [CVE-2023-21638](https://insights.sbomify.com/CVE-2023-21638/): Incorrect Type Conversion or Cast in Video (medium 6.7)
- [CVE-2023-21637](https://insights.sbomify.com/CVE-2023-21637/): Improper Restrictions of Operations within the Bounds of a Memory Buffer in Linux (medium 6.7)
- [CVE-2023-21636](https://insights.sbomify.com/CVE-2023-21636/): Improper Validation of Array Index in Linux (medium 6.7)
- [CVE-2023-21635](https://insights.sbomify.com/CVE-2023-21635/): Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity (medium 6.7)
- [CVE-2023-21634](https://insights.sbomify.com/CVE-2023-21634/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Radio Interface Layer (medium 6.7)
- [CVE-2023-21633](https://insights.sbomify.com/CVE-2023-21633/): Improper Restriction of Operations within the Bounds of a Memory Buffer in Linux (medium 6.7)
- [CVE-2023-21632](https://insights.sbomify.com/CVE-2023-21632/): Stack-based Buffer Overflow in Automotive GPU (high 8.4)
- [CVE-2023-21631](https://insights.sbomify.com/CVE-2023-21631/): Improper Input Validation in Modem (high 7.5)
- [CVE-2023-21630](https://insights.sbomify.com/CVE-2023-21630/): Integer Overflow in Multimedia Framework (high 8.4)
- [CVE-2023-2163](https://insights.sbomify.com/CVE-2023-2163/): Incorrect Verifier Branch Pruning Logic Leads To Arbitrary Read/Write In Linux Kernel and Lateral Privilege Escalation (critical 10.0)
- [CVE-2023-21629](https://insights.sbomify.com/CVE-2023-21629/): Double Free in Modem (medium 6.8)
- [CVE-2023-21628](https://insights.sbomify.com/CVE-2023-21628/): Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN HAL (high 8.4)
- [CVE-2023-21627](https://insights.sbomify.com/CVE-2023-21627/): Incorrect Type Conversion or Cast in Trusted Execution Environment (medium 6.7)
- [CVE-2023-21626](https://insights.sbomify.com/CVE-2023-21626/): Improper Authentication in HLOS. (high 7.1)
- [CVE-2023-21625](https://insights.sbomify.com/CVE-2023-21625/): Buffer Over-read in Network Services (high 8.2)
- [CVE-2023-21624](https://insights.sbomify.com/CVE-2023-21624/): Information Exposure in DSP Services (medium 6.2)
- [CVE-2023-21622](https://insights.sbomify.com/CVE-2023-21622/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21621](https://insights.sbomify.com/CVE-2023-21621/): Adobe FrameMaker Improper Input Validation Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21620](https://insights.sbomify.com/CVE-2023-21620/): Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-2162](https://insights.sbomify.com/CVE-2023-2162/): Use after free in Kernel (medium 5.5)
- [CVE-2023-21619](https://insights.sbomify.com/CVE-2023-21619/): Adobe FrameMaker Font Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21618](https://insights.sbomify.com/CVE-2023-21618/): ZDI-CAN-20963: Adobe Substance 3D Designer SBS File Parsing Uninitialized Variable Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21616](https://insights.sbomify.com/CVE-2023-21616/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2023-21615](https://insights.sbomify.com/CVE-2023-21615/): Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) (medium 5.4)
- [CVE-2023-21614](https://insights.sbomify.com/CVE-2023-21614/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21613](https://insights.sbomify.com/CVE-2023-21613/): Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (medium 5.5)
- [CVE-2023-21612](https://insights.sbomify.com/CVE-2023-21612/): Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation (high 7.8)
- [CVE-2023-21611](https://insights.sbomify.com/CVE-2023-21611/): Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalation (high 7.8)
- [CVE-2023-21610](https://insights.sbomify.com/CVE-2023-21610/): Adobe Acrobat Reader Stack-based Buffer Overflow Arbitrary code execution (high 7.8)
- [CVE-2023-2161](https://insights.sbomify.com/CVE-2023-2161/): XML external entity in OPC Factory Server (OFS) (medium 5.0)
- [CVE-2023-21609](https://insights.sbomify.com/CVE-2023-21609/): Adobe Acrobat Reader DC AcroForm Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability (high 7.8)
- [CVE-2023-21608](https://insights.sbomify.com/CVE-2023-21608/): Adobe Acrobat and Reader Use-After-Free (high 7.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/396/