1507 matches found
PT-2026-2699
CVE-2026-20853 Concurrent execution using shared resource with improper synchronization 'race condition' in Windows WalletService allows an unauthorized attacker to elevate privil… https://t.co/1I7UilLbTk...
PT-2026-2748
CVE-2026-20948 Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to execute code locally. https://t.co/RWIO4Ijxeo...
CVE-2021-33663
SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper...
CVE-2022-42280
NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass...
CVE-2025-64675
Improper neutralization of input during web page generation 'cross-site scripting' in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network...
Microsoft Partner Center 授权问题漏洞
Microsoft Partner Center is an online platform from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Partner Center that stems from improper authorization and could allow an unauthorized attacker to elevate privileges over the network...
CVE-2025-64671
Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to execute code locally...
CVE-2025-62557
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...
CVE-2025-62555
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2024-2105
An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...
CVE-2024-2105 JBL: Improper validation of ICM field in connection requests
An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...
PT-2025-50324
An unauthorised attacker within bluetooth range may use an improper validation during the BLE connection request to deadlock the affected devices...
CVE-2025-64667
User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-64667
User interface ui misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2025-62562
Use after free in Microsoft Office Outlook allows an unauthorized attacker to execute code locally...
CVE-2025-62564
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
CVE-2025-62559
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
CVE-2025-62558
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...