97848 matches found
Media Video Decoder Code Execution
The vulnerability of the Media Video Decoder decoder for Windows systems is related to operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Apache Struts RestfulActionMapper Code Execution
The vulnerability of the RestfulActionMapper component of the Apache Struts software framework is related to the lack of measures taken to neutralize special elements used in the expression language operator. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
QUIC Protocol Code Execution
The vulnerability of the QUIC protocol implementation in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Microsoft Excel Code Execution
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Reliable Multicast Transport Driver Code Execution
The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Office 365 Apps for Enterprise Buffer Overflow
The vulnerability of Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Microsoft Outlook Client Code Execution
The vulnerability of the Microsoft Outlook client and the Microsoft Office and 365 Apps for Enterprise packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...
Hyper-V Hardware Virtualization Code Execution
The vulnerability of the Hyper-V hardware virtualization technology for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Queue Manager Component Microsoft Message Queuing Service Code Execution
The vulnerability of the Queue Manager component of the Microsoft Message Queuing service on Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Windows GDI+ Code Execution
The vulnerability of the Windows GDI+ component of the Windows operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Hyper-V Hardware Virtualization Code Execution
The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Integer Overflow Code Execution
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise is related to a count overflow issue. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Cisco Secure Email Gateway Advanced Malware Protection Privilege Escalation
The vulnerability of the Advanced Malware Protection module of the Cisco Secure Email Gateway protection tool is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain write access to arbitrary files and execute...
PAN-OS Management Interface Code Execution Root Privileges
The vulnerability of the PAN-OS operating system’s management interface is related to incorrect code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...
PostScript Printer Driver Code Execution
The vulnerability of the PostScript Printer Driver for Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Remote Desktop Services RCE
The vulnerability of Remote Desktop Services RDS for Windows operating systems relates to the use of memory after release. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
Microsoft Outlook Client Code Execution
The vulnerability of the Microsoft Outlook client and the Microsoft Office and 365 Apps for Enterprise packages is related to a memory reclamation error. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Google Chrome PDF Code Execution
The vulnerability of the Google Chrome browser’s PDF component relates to the ability to utilize memory after decompression. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...
Graphics Kernel Privilege Escalation
The vulnerability of the Graphics Kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
FRM Metadata Handler Code Execution
The vulnerability of the FRM Metadata Handler component in the MariaDB database management system is related to incorrect checking of the specified index, position, or offset in the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Sync Component Protected Information Access
The vulnerability of the Sync component in Google Chrome and Microsoft Edge is related to insufficient validation of the input protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
Media component Protected Information Access
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to reading protected information beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...
Keycloak OpenID Connect DoS
The vulnerability of the Keycloak identity management and access control software is related to the handling of abnormally long scope parameters in the OpenID Connect mechanism. Exploiting this vulnerability could allow a malicious actor to trigger service failures...
Omnibox address bars compromise Data Compromise
The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...
Shell command bypass Windows
The vulnerability of the Shell command shell in Windows operating systems is related to the lack of measures taken to clean data at the control level. Exploiting this vulnerability allows a remote attacker to bypass existing security mechanisms...
QGIS GIS if_nullptr_null_str() Disclosure
The vulnerability of the ifnullptrnullstr function in QGIS GIS software is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to disclose protected information...
pimcore Unauthorized Access
The vulnerability of the PHP pimcore software platform is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
DHCP Server Windows Code Execution
The vulnerability of DHCP servers for Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Windows DHCP Client Code Execution
The vulnerability of DHCP clients of Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Exchange Server Buffer Overflow RCE
The vulnerability of Microsoft Exchange Server’s mail server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ServiceWorker Component Access Information Disclosure
The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information...
Google Chrome Microsoft Edge DoS
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in type conversion of protected information. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
CSS components in Google Chrome and Microsoft Edge Information Disclosure
The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to insufficient elimination of specific elements in the request. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Google Chrome Microsoft Edge DoS
The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...
DataTransfer Component Protected Information Access
The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Input component in Google
The vulnerability of the Input component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Workers Component Protected Information Access
The vulnerability of the Workers component in Google Chrome and Microsoft Edge browsers is related to insufficient checking of the status of shared resources. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Controls Component Compromise Protected Information
The vulnerability of the Controls component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...
Google Chrome Edge FileSystem Data Compromise
The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge relates to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...
ANGLE Component Protected Information Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...
Geometry Component Google Chrome Microsoft Edge Protected Information DoS
The vulnerability of the Geometry component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to protected information, as well as cause service...
Animation Component Google Chrome Microsoft Edge DoS
The vulnerability of the Animation component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
CSS components in Google Chrome and Microsoft Edge Information Disclosure
The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Proxy Component DoS
The vulnerability of the Proxy component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
WebRTC DoS
The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...