283 matches found
Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2025-16693)
Microsoft SharePoint Server is a groupware for Windows Server made by Microsoft that provides basic portal and corporate intranet functionality. A remote code execution vulnerability exists in Microsoft SharePoint Server, which can be exploited by an attacker to execute arbitrary code on the syst...
M365 Copilot Information Disclosure Vulnerability
Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network...
Microsoft Local Security Authority Server 访问控制错误漏洞
Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit this vulnerability to cause a denial of service on the system. The...
OneDrive File Picker Flaw Gives Apps Full Access to User Drives
A recent investigation by cybersecurity researchers at Oasis Security has revealed a data overreach in how Microsoft’s OneDrive…...
CVE-2019-1380
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...
CVE-2019-1447
A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka 'Microsoft Office Online Spoofing Vulnerability'. This CVE ID is unique from CVE-2019-1445...
Microsoft Windows Kernel Number Error Vulnerability
The Microsoft Windows Kernel is the kernel of the Windows operating system from the American company Microsoft. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to obtain sensitive information...
VulnCheck KEV: CVE-2024-38023
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2025-24074 Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network...
GSS-NTLMSSP vulnerable to incorrect free when decoding target information
...
GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings
...
CVE-2025-24072 Microsoft Local Security Authority (LSA) Server Elevation of Privilege Vulnerability
...
Windows NTFS Information Disclosure Vulnerability
Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information locally...
Windows Mark of the Web Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature locally...
PT-2025-10838 · Microsoft · Kernel Streaming Wow Thunk Service Driver +1
Name of the Vulnerable Software and Affected Versions: Kernel Streaming WOW Thunk Service Driver affected versions not specified Description: A heap-based buffer overflow in the Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally. Recommendations:...
Security Update for Microsoft .NET Core (March 2025)
The version of Microsoft .NET Core installed on the remote host is 8.0.x 8.0.14 or 9.0.x 9.0.3. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a...
A security flaw in Node.js allows a bypass of network import restrictions. By embedding non-network imports in data URLs, an attacker can execute arbitrary code, compromising system security. Verified on various platforms, the vulnerability is mitigated by forbidding data URLs in network imports. Exploiting this flaw can violate network import security, posing a risk to developers and servers.
...