ByteOS

Azure DevOps Server 2020.1.2

Product

Platforms

Unknown

Versions

Affected

From 2020.1.0 before 20230601.3 (custom)

Vendor

Product

Azure DevOps Server 2022

Platforms

Unknown

Versions

Affected

From 20230131.0 before 20230602.4 (custom)

Vendor

Azure DevOps Server 2022.0.1

Product

Platforms

Unknown

Versions

Affected

From 2022.0.0 before 20230602.5 (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-94	CWE-94: Improper Control of Generation of Code ('Code Injection')

Type: CWE

CWE ID: CWE-94

Description: CWE-94: Improper Control of Generation of Code ('Code Injection')

Metrics

Version	Base score	Base severity	Vector
3.1	5.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

References

Hyperlink	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569	vendor-advisory

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569

Resource:

vendor-advisory

▼Authorized Data Publishers (ADP)

1. CISA ADP Vulnrichment

Metrics Other Info

2. CVE Program Container

References

Hyperlink	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569	vendor-advisory x_transferred

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569

Resource:

vendor-advisory

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secure@microsoft.com

Published At:14 Jun, 2023 | 00:15

Updated At:29 May, 2024 | 02:15

Azure DevOps Server Spoofing Vulnerability

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

CPE Matches

cpe:2.3:o:microsoft:azure_devops_server:2020.1.2:-:*:*:*:*:*:*

>>azure_devops_server>>2020.1.2

cpe:2.3:o:microsoft:azure_devops_server:2022:-:*:*:*:*:*:*

>>azure_devops_server>>2022

cpe:2.3:o:microsoft:azure_devops_server:2022.0.1:-:*:*:*:*:*:*

>>azure_devops_server>>2022.0.1

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-94	Secondary	secure@microsoft.com

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-94

Type: Secondary

Source: secure@microsoft.com

References

Hyperlink	Source	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569	secure@microsoft.com	Patch Vendor Advisory

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21569

Source: secure@microsoft.com

Resource:

Patch

Vendor Advisory

Similar CVEs

486Records found

CVE-2008-4835

Matching Score-6

Matching Score-6

CVSS Score-9.8||CRITICAL

EPSS-63.69% / 98.34%

7 Day CHG~0.00%

Published-14 Jan, 2009 | 22:00

Updated-15 Oct, 2024 | 15:35

SMB in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to execute arbitrary code via malformed values of unspecified "fields inside the SMB packets" in an NT Trans2 request, related to "insufficiently validating the buffer size," aka "SMB Validation Remote Code Execution Vulnerability."

Product-windows_vista windows_2000 windows_xp windows_server_2003 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-43221

Matching Score-6

Matching Score-6

CVSS Score-4.2||MEDIUM

EPSS-1.13% / 77.41%

7 Day CHG~0.00%

Published-24 Nov, 2021 | 01:05

Updated-04 Aug, 2024 | 03:55

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Product-edge_chromium Microsoft Edge (Chromium-based)

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-43208

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-1.39% / 79.61%

7 Day CHG~0.00%

Published-10 Nov, 2021 | 00:47

Updated-01 Oct, 2024 | 15:52

3D Viewer Remote Code Execution Vulnerability

Product-3d_viewer 3D Viewer

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0558

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-15.43% / 94.39%

7 Day CHG~0.00%

Published-15 Oct, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-0564.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-flash_player adobe_air linux_kernel adobe_air_sdk windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-8447

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-20.52% / 95.35%

7 Day CHG~0.00%

Published-10 Dec, 2014 | 21:00

Updated-12 Apr, 2025 | 10:46

Adobe Reader and Acrobat 10.x before 10.1.13 and 11.x before 11.0.10 on Windows and OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2014-8445, CVE-2014-8446, CVE-2014-8456, CVE-2014-8458, CVE-2014-8459, CVE-2014-8461, and CVE-2014-9158.

Vendor-n/a Apple Inc.Adobe Inc.Microsoft Corporation

Product-windows acrobat mac_os_x acrobat_reader n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-4387

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-9.3||HIGH

EPSS-5.82% / 90.18%

7 Day CHG~0.00%

Published-10 Nov, 2008 | 16:00

Updated-07 Aug, 2024 | 10:17

Unspecified vulnerability in the Simba MDrmSap ActiveX control in mdrmsap.dll in SAP SAPgui allows remote attackers to execute arbitrary code via unknown vectors involving instantiation by Internet Explorer.

Vendor-simba_technologies n/a SAP SE Microsoft Corporation

Product-sapgui mdrmsap_activex_control internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-4024

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-57.49% / 98.07%

7 Day CHG~0.00%

Published-10 Dec, 2008 | 13:33

Updated-07 Aug, 2024 | 10:00

Microsoft Office Word 2000 SP3 and 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a Word document with a crafted lcbPlcfBkfSdt field in the File Information Block (FIB), which bypasses an initialization step and triggers an "arbitrary free," aka "Word Memory Corruption Vulnerability."

Product-office_word_viewer office_word open_xml_file_format_converter office office_outlook works office_system office_compatibility_pack_for_word_excel_ppt_2007 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-4250

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-94.13% / 99.90%

7 Day CHG~0.00%

Published-23 Oct, 2008 | 21:00

Updated-07 Aug, 2024 | 10:08

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."

Product-windows_vista windows_2000 windows_xp windows_server_2003 windows_server_2008 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0294

Matching Score-6

Matching Score-6

CVSS Score-10||HIGH

EPSS-27.21% / 96.21%

7 Day CHG~0.00%

Published-12 Feb, 2014 | 02:00

Updated-11 Apr, 2025 | 00:51

Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."

Product-microsoft_forefront_protection_2010 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-3956

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-33.60% / 96.79%

7 Day CHG~0.00%

Published-09 Sep, 2008 | 14:00

Updated-07 Aug, 2024 | 10:00

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .opx file.

Product-organization_chart n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-0251

Matching Score-6

Matching Score-6

CVSS Score-9||HIGH

EPSS-13.96% / 94.07%

7 Day CHG~0.00%

Published-14 May, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerability."

Product-office_web_apps_server sharepoint_services project_server sharepoint_server web_applications sharepoint_server_client_components_sdk sharepoint_designer sharepoint_foundation n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5325

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-0.83% / 73.63%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

Adobe Reader and Acrobat 11.x before 11.0.05 on Windows allow remote attackers to execute arbitrary JavaScript code in a javascript: URL via a crafted PDF document.

Vendor-n/a Microsoft Corporation Adobe Inc.

Product-windows acrobat acrobat_reader n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-3648

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-42.29% / 97.36%

7 Day CHG~0.00%

Published-12 Aug, 2008 | 23:00

Updated-07 Aug, 2024 | 09:45

nslookup.exe in Microsoft Windows XP SP2 allows user-assisted remote attackers to execute arbitrary code, as demonstrated by an attempted DNS zone transfer, and as exploited in the wild in August 2008.

Product-windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-3018

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-50.10% / 97.74%

7 Day CHG~0.00%

Published-12 Aug, 2008 | 23:00

Updated-07 Aug, 2024 | 09:21

Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not properly parse the length of a PICT file, which allows remote attackers to execute arbitrary code via a crafted PICT file, aka the "Malformed PICT Filter Vulnerability," a different vulnerability than CVE-2008-3021.

Product-works windows_nt office office_converter_pack n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5331

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-87.69% / 99.43%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.

Vendor-n/a Adobe Inc.Linux Kernel Organization, Inc Apple Inc.Microsoft Corporation

Product-air flash_player linux_kernel air_sdk windows mac_os_x n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2007-3550

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-27.36% / 96.23%

7 Day CHG~0.00%

Published-03 Jul, 2007 | 21:00

Updated-07 Aug, 2024 | 15:15

Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via JavaScript, which results in a denial of service (website suppression and resource consumption), aka "Internet Explorer Zone Domain Specification Dos and Page Suppressing". NOTE: this issue has been disputed by a third party, who states that the zone settings cannot be manipulated

Product-internet_explorer ie n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2015-0088

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-28.35% / 96.34%

7 Day CHG~0.00%

Published-11 Mar, 2015 | 10:00

Updated-12 Apr, 2025 | 10:46

Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted (1) web site or (2) file, aka "Adobe Font Driver Remote Code Execution Vulnerability," a different vulnerability than CVE-2015-0090, CVE-2015-0091, CVE-2015-0092, and CVE-2015-0093.

Product-windows_rt windows_7 windows_8 windows_server_2008 windows_rt_8.1 windows_vista windows_server_2003 windows_server_2012 windows_8.1 n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-5059

Matching Score-6

Matching Score-6

CVSS Score-6.8||MEDIUM

EPSS-11.01% / 93.16%

7 Day CHG~0.00%

Published-11 Dec, 2013 | 00:00

Updated-11 Apr, 2025 | 00:51

Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka "SharePoint Page Content Vulnerabilities."

Product-office_web_apps sharepoint_server n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3906

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-92.89% / 99.76%

7 Day CHG+0.03%

Published-06 Nov, 2013 | 11:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-08-15||Apply updates per vendor instructions.

GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.

Product-windows_server_2008 powerpoint_viewer word_viewer lync office_compatibility_pack windows_vista office excel_viewer n/a Graphics Component

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3144

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-16.81% / 94.69%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3151 and CVE-2013-3163.

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3164

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-28.63% / 96.36%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3127

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-45.34% / 97.52%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka "WMV Video Decoder Remote Code Execution Vulnerability."

Product-windows_media_format_runtime windows_media_player n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3150

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-11.24% / 93.25%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3145.

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3151

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-11.37% / 93.29%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-42309

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-1.28% / 78.78%

7 Day CHG~0.00%

Published-15 Dec, 2021 | 14:14

Updated-04 Aug, 2024 | 03:30

Microsoft SharePoint Server Remote Code Execution Vulnerability

Product-sharepoint_server sharepoint_foundation sharepoint_enterprise_server Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundation 2013 Service Pack 1 Microsoft SharePoint Server Subscription Edition

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3894

Matching Score-6

Matching Score-6

CVSS Score-8.1||HIGH

EPSS-26.42% / 96.12%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

The kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow remote attackers to execute arbitrary code via a crafted CMAP table in a TrueType font (TTF) file, aka "TrueType Font CMAP Table Vulnerability."

Product-windows_rt windows_7 windows_8 windows_server_2008 windows_vista windows_server_2003 windows_server_2012 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3162

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-15.76% / 94.46%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3115.

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3133

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-8.64% / 92.08%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka "Anonymous Method Injection Vulnerability."

Product-.net_framework n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3147

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-15.76% / 94.46%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3149

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-15.76% / 94.46%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3129

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-44.19% / 97.46%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT; GDI+ in Office 2003 SP3, 2007 SP3, and 2010 SP1; GDI+ in Visual Studio .NET 2003 SP1; and GDI+ in Lync 2010, 2010 Attendee, 2013, and Basic 2013 allow remote attackers to execute arbitrary code via a crafted TrueType Font (TTF) file, aka "TrueType Font Parsing Vulnerability."

Product-visual_studio_.net windows_rt windows_7 windows_8 windows_server_2008 lync lync_basic .net_framework silverlight windows_vista office windows_server_2003 windows_server_2012 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3152

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-28.63% / 96.36%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3146.

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3178

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-56.27% / 98.02%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted Silverlight application, aka "Null Pointer Vulnerability."

Product-silverlight n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3174

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-18.46% / 94.99%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

DirectShow in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to execute arbitrary code via a crafted GIF file, aka "DirectShow Arbitrary Memory Overwrite Vulnerability."

Product-windows_7 windows_8 windows_server_2008 windows_vista windows_server_2003 windows_server_2012 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3148

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-15.76% / 94.46%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2013-3153.

Product-internet_explorer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3200

Matching Score-6

Matching Score-6

CVSS Score-7.2||HIGH

EPSS-0.45% / 62.62%

7 Day CHG~0.00%

Published-09 Oct, 2013 | 14:44

Updated-11 Apr, 2025 | 00:51

The USB drivers in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows Server 2012, and Windows RT allow physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka "Windows USB Descriptor Vulnerability."

Product-windows_rt windows_7 windows_8 windows_server_2008 windows_vista windows_server_2003 windows_server_2012 windows_xp n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3131

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-54.06% / 97.92%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka "Array Access Violation Vulnerability."

Product-.net_framework silverlight n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-3171

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-8.64% / 92.08%

7 Day CHG~0.00%

Published-10 Jul, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka "Delegate Serialization Vulnerability."

Product-.net_framework n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2014-6361

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-22.73% / 95.66%

7 Day CHG~0.00%

Published-11 Dec, 2014 | 00:00

Updated-12 Apr, 2025 | 10:46

Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 Gold and SP1, Excel 2013 RT Gold and SP1, and Office Compatibility Pack allow remote attackers to execute arbitrary code via a crafted Office document, aka "Excel Invalid Pointer Remote Code Execution Vulnerability."

Product-excel office_compatibility_pack n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-2841

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-31.19% / 96.60%

7 Day CHG~0.00%

Published-24 Jun, 2008 | 19:00

Updated-07 Aug, 2024 | 09:14

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.

Vendor-xchat n/a Microsoft Corporation

Product-internet_explorer xchat windows_nt n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2007-0675

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.6||HIGH

EPSS-39.15% / 97.18%

7 Day CHG~0.00%

Published-03 Feb, 2007 | 01:00

Updated-07 Aug, 2024 | 12:26

A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Speech Recognition feature is enabled, allows user-assisted remote attackers to delete arbitrary files, and conduct other unauthorized activities, via a web page with an embedded sound object that contains voice commands to an enabled microphone, allowing for interaction with Windows Explorer.

Product-windows_vista n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-2463

Matching Score-6

Assigner-CERT/CC

Matching Score-6

Assigner-CERT/CC

CVSS Score-6.8||MEDIUM

EPSS-84.09% / 99.26%

7 Day CHG~0.00%

Published-07 Jul, 2008 | 23:00

Updated-07 Aug, 2024 | 09:05

The Microsoft Office Snapshot Viewer ActiveX control in snapview.ocx 10.0.5529.0, as distributed in the standalone Snapshot Viewer and Microsoft Office Access 2000 through 2003, allows remote attackers to download arbitrary files to a client machine via a crafted HTML document or e-mail message, probably involving use of the SnapshotPath and CompressedPath properties and the PrintSnapshot method. NOTE: this can be leveraged for code execution by writing to a Startup folder.

Product-office_snapshot_viewer_activex n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-2253

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-45.86% / 97.54%

7 Day CHG~0.00%

Published-10 Sep, 2008 | 15:00

Updated-07 Aug, 2024 | 08:58

Unspecified vulnerability in Microsoft Windows Media Player 11 allows remote attackers to execute arbitrary code via a crafted audio-only file that is streamed from a Server-Side Playlist (SSPL) on Windows Media Server, aka "Windows Media Player Sampling Rate Vulnerability."

Product-windows-nt windows_xp windows_media_player n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2008-2160

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-43.77% / 97.44%

7 Day CHG~0.00%

Published-12 May, 2008 | 22:00

Updated-07 Aug, 2024 | 08:49

Multiple unspecified vulnerabilities in the JPEG (GDI+) and GIF image processing in Microsoft Windows CE 5.0 allow remote attackers to execute arbitrary code via crafted (1) JPEG and (2) GIF images.

Product-windows_embedded_compact n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-42298

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-1.07% / 76.89%

7 Day CHG~0.00%

Published-10 Nov, 2021 | 00:47

Updated-04 Aug, 2024 | 03:30

Microsoft Defender Remote Code Execution Vulnerability

Product-malware_protection_engine Microsoft Malware Protection Engine

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2025-49704

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-62.44% / 98.30%

7 Day CHG-2.98%

Published-08 Jul, 2025 | 16:58

Updated-23 Aug, 2025 | 00:40

Known KEV||Action Due Date - 2025-07-23||Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.

Microsoft SharePoint Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Product-sharepoint_server Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2019 SharePoint

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2007-3037

Matching Score-6

Matching Score-6

CVSS Score-4||MEDIUM

EPSS-59.74% / 98.18%

7 Day CHG~0.00%

Published-14 Aug, 2007 | 21:00

Updated-07 Aug, 2024 | 13:57

Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafted header information that causes a size mismatch between compressed and decompressed data and triggers a heap-based buffer overflow, aka "Windows Media Player Code Execution Vulnerability Parsing Skins."

Product-windows_media_player n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-1335

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-51.86% / 97.82%

7 Day CHG~0.00%

Published-15 May, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka "Word Shape Corruption Vulnerability."

Product-word word_viewer n/a

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-42296

Matching Score-6

Matching Score-6

CVSS Score-7.8||HIGH

EPSS-1.01% / 76.21%

7 Day CHG~0.00%

Published-10 Nov, 2021 | 00:47

Updated-04 Aug, 2024 | 03:30

Microsoft Word Remote Code Execution Vulnerability

Product-365_apps office Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2013-1296

Matching Score-6

Matching Score-6

CVSS Score-9.3||HIGH

EPSS-51.86% / 97.82%

7 Day CHG~0.00%

Published-09 Apr, 2013 | 22:00

Updated-11 Apr, 2025 | 00:51

The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object, and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object, aka "RDP ActiveX Control Remote Code Execution Vulnerability."