28326 matches found
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
...
Chromium: CVE-2023-4901 Inappropriate implementation in Prompts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Chromium: CVE-2023-2135 Use after free in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Publisher Remote Code Execution Vulnerability
...
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
Azure Service Connector Security Feature Bypass Vulnerability
...
Windows Kernel Denial of Service Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...
Windows iSCSI Service Denial of Service Vulnerability
...
Chromium: CVE-2023-0700 Inappropriate implementation in Download
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3886 Use after free in Speech Recognition
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
...
Chromium: CVE-2022-3446 Heap buffer overflow in WebSQL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Graphics Component Information Disclosure Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability
...
Chromium: CVE-2022-2615 Insufficient policy enforcement in Cookies
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1871 Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Remote Code Execution Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
NTFS Elevation of Privilege Vulnerability
...
Azure RTOS Elevation of Privilege Vulnerability
...
Windows NTFS Remote Code Execution Vulnerability
...
Windows Print Spooler Spoofing Vulnerability
...
Chromium: CVE-2021-30621 UI Spoofing in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows Event Tracing Information Disclosure Vulnerability
...
Windows CSC Service Elevation of Privilege Vulnerability
...
Windows LUAFV Elevation of Privilege Vulnerability
...
TPM Device Driver Information Disclosure Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows GDI+ Information Disclosure Vulnerability
...
Windows Update Stack Elevation of Privilege Vulnerability
...
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Group Policy Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a...
Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability
A denial of service vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...
Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability
A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises does not properly sanitize a specially crafted web request to an affected Dynamics server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Dynamics...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...