Microsoft SharePoint Server Security Issue

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

Microsoft SharePoint Server Security Issue

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

Kerberos Protocol DoS

The vulnerability of the Kerberos protocol for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Trend Micro Apex One Code Execution

The vulnerability of the Trend Micro Apex One antivirus software is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability allows a hacker to execute arbitrary code...

X Wayland Protocol CreateSaverWindow Unauthorized Access

The vulnerability of the CreateSaverWindow function in the Wayland protocol implementation for X.Org XWaylan, as well as in the X Window System Server implementation for X.Org, is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious...

Wayland Protocol DRIGetBuffersWithFormat Privilege Escalation

The vulnerability of the DRIGetBuffersWithFormat module in the Wayland protocol for X.Org XWaylan, as well as in the X.Org Server, is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to gain elevated privileges and cause service interruptions...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Boot Manager Bootmgr Bypass

The vulnerability of the Windows Boot Manager bootmgr loader in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

File Input Service Chrome Edge UI Replacement

The vulnerability of the File Input service in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface through a created HTML page...

Enterprise components Privilege Escalation

The vulnerability of the Enterprise browsers’ components in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Media components Google Chrome Microsoft Edge UI Replacement

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface through a created HTML page...

WebUI Domain Substitution

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform domain substitution using a created domain name...

Windows Push Notifications Disclosure

The vulnerability of the Microsoft Graphics component in the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

Windows Performance Monitor Code Execution

The vulnerability of the Windows Performance Monitor component of the Windows operating system relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Windows Telephony Service Disclosure

The vulnerability of the Windows operating system’s Telephony Service is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

Windows TCP/IP DoS

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to incorrect calculations of the size of the buffer allocated. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows kernel Privilege Escalation

The vulnerability of Windows operating system kernels is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Extensions Component Code Execution

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code within the sandbox by using the created HTML page...

Windows Performance Monitor Code Execution

The vulnerability of the Windows Performance Monitor component of the Windows operating system is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

Windows Push Notifications Disclosure

The vulnerability of Windows Push Notifications services relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these services...

Extensions Component Code Execution

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through malicious network traffic...

Microsoft Office Memory Disclosure

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...

Windows Push Notifications Privilege Escalation

The vulnerability of the Windows Push Notifications service is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Remote Desktop Client Code Execution

The vulnerability of the Remote Desktop Client for Windows operating systems relates to the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Windows Common Log File System Driver Privilege Escalation

The vulnerability of the Windows Common Log File System Driver in the operating system is related to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Live Share Canvas SDK Privilege Escalation

The vulnerability of the Microsoft Live Share Canvas SDK relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

DHCP Server Unauthorized Access

The vulnerability of the DHCP server service for Windows operating systems is related to improper handling of values. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to confidential information...

RuBackup parse_version_item() DoS

The vulnerability of the parseversionitem function in the RuBackup backup system is related to insufficient resource capacity. Exploiting this vulnerability could allow a malicious actor to cause service failures...

RuBackup Access Control Unauthorized Access Disclosure

The vulnerability of the RuBackup backup system is related to access control errors. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to confidential information in the “Global Configuration” panel...

Microsoft Office Microsoft 365 Apps for Enterprise Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

Microsoft Exchange Server servers

The vulnerability of Microsoft Exchange Server servers is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

DWM Core Library Privilege Escalation

The vulnerability of the DWM Core Library in Windows operating systems relates to the ability to utilize memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Shell command Disclosure

The vulnerability of the Shell command shell in Windows operating systems is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

DWM Core Library Disclosure

The vulnerability of the DWM Core Library in Windows operating systems relates to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

Windows Push Notifications Privilege Escalation

The vulnerability of Windows push-notifications services is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to gain increased privileges...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Remote Desktop Client Code Execution

The vulnerability of the Remote Desktop Client for Windows operating systems in relation to client machines is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Hyper-V Windows Unauthorized Access

The vulnerability of the Hyper-V component of the Windows operating system is related to the disclosure of information. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Windows Attestation Privilege Escalation

The vulnerability of the Windows Attestation service for Windows operating systems is related to the violation of trust boundaries. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Azure Stack Edge Code Execution

The vulnerability of the Microsoft Azure Stack Edge software platform is related to improper external management of file names or file paths. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Microsoft Word Office Pointer Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an untrusted pointer. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

Microsoft SharePoint Server lies

The vulnerability of the Microsoft SharePoint Server software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Microsoft SharePoint Server Deserialization

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

RuBackup Access Control Unauthorized Access

The vulnerability of the RuBackup backup system is related to errors in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access and edit information in the “Service Task Priorities” panel...

Braille support module Privilege Escalation

The vulnerability of the Braille support module in the text-to-speech application for blind and visually impaired users like Narrator is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...