2036 matches found
CVE-2025-26683
CVE-2025-26683 describes an improper authorization elevation of privilege in Microsoft Azure Playwright that can be exploited by an unauthenticated attacker over the network. Multiple sources consistently identify it as a network-based privilege-escalation issue affecting Azure Playwright, with t...
Microsoft Azure Playwright 授权问题漏洞
Microsoft Azure Playwright is an open source framework for automated web application testing from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Azure Playwright that stems from improper authorization and could allow an unauthorized attacker to elevate...
CVE-2024-8313 Default or Guessable SNMP community names in B&R APROL
An Exposure of Sensitive System Information to an Unauthorized Control Sphere and Initialization of a Resource with an Insecure Default vulnerability in the SNMP component of B&R APROL 4.4-00P5 may allow an unauthenticated adjacent-based attacker to read and alter configuration using SNMP...
CVE-2025-29806
No cwe for this issue in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
CVE-2025-24996
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-24984
Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack...
CVE-2025-21180
Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally...
CVE-2025-24079
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-24035
Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network...
CVE-2025-24084
Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally...
CVE-2025-24075
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-24057
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-24078
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-24043
Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network...
CVE-2025-24083
Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-24081
Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-26633
Improper neutralization in Microsoft Management Console allows an unauthorized attacker to bypass a security feature locally...
CVE-2025-26630
Use after free in Microsoft Office Access allows an unauthorized attacker to execute code locally...
Apache Tomcat Remote Code Execution Vulnerability
Apache Tomcat is an open source lightweight Java Web server and Servlet container , designed to run Java Servlet and JSP core tools designed to support dynamic content processing and hosting of static resources , is the cornerstone of small and medium-sized Java Web application development and...
