Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

DirectX Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

DLL Loading Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, ...

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...

Chromium: CVE-2026-9126 Use after free in DOM

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

urllib3: Sensitive headers forwarded across origins in proxied low-level redirects

...

GitHub Copilot for Jetbrains Remote Code Execution Vulnerability

Improper neutralization of special elements used in a command 'command injection' in Copilot allows an unauthorized attacker to execute code locally...

Microsoft Defender for Endpoint Elevation of Privilege Vulnerability

Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Out-of-bounds read in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Microsoft Bing Remote Code Execution Vulnerability

Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network...

Windows Setup Files Cleanup Elevation of Privilege Vulnerability

...

Windows Virtual Trusted Platform Module Denial of Service Vulnerability

...

Windows Telephony Service Remote Code Execution Vulnerability

...

Windows Smart Card Reader Information Disclosure Vulnerability

...

Windows Themes Spoofing Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

...

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

...

Chromium: CVE-2024-8639 Use after free in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

...

Azure Stack Hub Elevation of Privilege Vulnerability

...

Windows Network Virtualization Remote Code Execution Vulnerability

...

.NET and Visual Studio Denial of Service Vulnerability

...

Chromium: CVE-2024-7550 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-6990 Uninitialized Use in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft SharePoint Remote Code Execution Vulnerability

...

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

Chromium: CVE-2024-5498 Use after free in Presentation API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-5158 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-4949 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-3837 Use after free in QUIC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Secure Boot Security Feature Bypass Vulnerability

...

Windows Telephony Server Elevation of Privilege Vulnerability

...

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

...

Microsoft Defender for IoT Remote Code Execution Vulnerability

...

Chromium: CVE-2024-3158 Use after free in Bookmarks

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-2629 Incorrect security UI in iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Kernel Denial of Service Vulnerability

...

Chromium: CVE-2024-1938 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows OLE Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Chromium: CVE-2024-0812 Inappropriate implementation in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

...

Windows Bluetooth Driver Remote Code Execution Vulnerability

...

Windows MSHTML Platform Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft Exchange Server Spoofing Vulnerability

...

Chromium: CVE-2023-5856 Use after free in Side Panel

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-5852 Use after free in Printing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...