Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Schneider-electric Apc Easy Ups Online Monitoring SoftwareA CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cau…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could cause local privilege escalation when a local attacker modifies the webroot directory. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42972

Schneider-electric Apc Easy Ups Online Monitoring SoftwareA CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escal…

Risk 69
Severity
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

A CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause local privilege escalation when local attacker connects to the database. Affected Products: APC Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GA), APC Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GA-01-22261), Schneider Electric Easy UPS Online Monitoring Software (Windows 7, 10, 11 & Windows Server 2016, 2019, 2022 - Versions prior to V2.5-GS), Schneider Electric Easy UPS Online Monitoring Software (Windows 11, Windows Server 2019, 2022 - Versions prior to V2.5-GS-01-22261)

First published (updated )
CVE-2022-42973

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21772

Microsoft Windows Server 2012 R2Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Risk 77
Severity
8.8
Integer Underflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21681

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Integer Underflow
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21556

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21754

Microsoft Windows Server 2012 R2Windows Print Spooler Elevation of Privilege Vulnerability

Risk 52
Severity
7.1
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C

Windows Print Spooler Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21760

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21675

Microsoft Windows Server 2012 R2Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21524

Microsoft Windows 7Windows Print Spooler Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Print Spooler Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21765

Microsoft Windows 7Windows NTLM Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows NTLM Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21746

Microsoft Windows Server 2012 R2Windows Netlogon Denial of Service Vulnerability

Risk 43
Severity
7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Netlogon Denial of Service Vulnerability

First published (updated )
CVE-2023-21728

Microsoft Windows Server 2012 R2Microsoft ODBC Driver Remote Code Execution Vulnerability

Risk 77
Severity
8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft ODBC Driver Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21732

Microsoft Windows Server 2012 R2Windows Win32k Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Win32k Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21680

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

Risk 43
Severity
7.5
Null Pointer Dereference
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability

First published (updated )
CVE-2023-21757

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Race Condition
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21546

Microsoft Windows 7Windows GDI Elevation of Privilege Vulnerability

Risk 63
Severity
7
Use After Free
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows GDI Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21532

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21543

Microsoft Windows Server 2012 R2Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Integer Overflow
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21561

Microsoft Windows Server 2012 R2Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
Race Condition, Use After Free
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21679

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Input Validation
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21749

Microsoft Windows 7Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

First published (updated )
CVE-2023-21548

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21773

Microsoft Windows Server 2012 R2Windows Installer Elevation of Privilege Vulnerability

Risk 63
Severity
7
Race Condition
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Installer Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21542

Microsoft Windows 7Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21748

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21774

Microsoft Windows 7Windows Backup Service Elevation of Privilege Vulnerability

Risk 52
Severity
7.1
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C

Windows Backup Service Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21752

Microsoft Windows Server 2012 R2Windows Print Spooler Elevation of Privilege Vulnerability

Risk 87
Severity
7.8
Exploited
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Print Spooler Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21678

Microsoft Windows Server 2012 R2Windows Kernel Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
Use After Free
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Windows Kernel Elevation of Privilege Vulnerability

First published (updated )
CVE-2023-21747

Microsoft Windows 7Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Risk 69
Severity
7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

1 / 3
Source: Microsoft
First published (updated )
CVE-2023-21537

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203