24507 matches found
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
Microsoft Outlook Remote Code Execution Vulnerability
...
Microsoft Guidance for Addressing Security Feature Bypass in GRUB
Executive Summary Microsoft is aware of a vulnerability in the GRand Unified Boot Loader GRUB, commonly used by Linux. This vulnerability, known as “There’s a Hole in the Boot”, could allow for Secure Boot bypass. To exploit this vulnerability, an attacker would need to have administrative...
Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-1096 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2022-1096 exists in the wild...
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
...
Microsoft Exchange Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs;...
Microsoft Office/WordPad Remote Code Execution Vulnerability w/Windows
A remote code execution vulnerability exists in the way that Microsoft Office and WordPad parse specially crafted files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or...
Latest Servicing Stack Updates
This is a list of the latest servicing stack updates for each operating system. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the User-Mode Power Service UMPS handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could ru...
Windows Kerberos Elevation of Privilege Vulnerability
...
Scripting Engine Memory Corruption Vulnerability
...
Microsoft Guidance on Intel Processor MMIO Stale Data Vulnerabilities
Executive Summary On June 14, 2022, Intel published information about a class of memory-mapped I/O vulnerabilities known as Processor MMIO Stale Data Vulnerabilities. An attacker who successfully exploited these vulnerabilities might be able to read privileged data across trust boundaries. In...
Chromium Security Updates for Microsoft Edge (Chromium-Based)
Please note: Starting 1/21/2021, we will be releasing the Chrome CVEs that are included in the new releases of Microsoft Edge Chromium-based directly in the Security Update Guide. Please see Security Update Guide Supports CVEs Assigned by Industry Partners for more information. This advisory will...
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Microsoft Photos App Remote Code Execution Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
BitLocker Security Feature Bypass Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Intel: CVE-2022-21166 Device Register Partial Write (DRPW)
...
Azure Data Studio Elevation of Privilege Vulnerability
...
Windows Wi-Fi Driver Remote Code Execution Vulnerability
...
Netlogon Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NRPC. An attacker who successfully exploited the vulnerability could run a specially crafted application on a...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
.NET Framework Information Disclosure Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Windows Credential Roaming Service Elevation of Privilege Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
HTTP V3 Denial of Service Vulnerability
...
Windows ALPC Elevation of Privilege Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
...
Windows Scripting Languages Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Windows IIS Server Elevation of Privilege Vulnerability
...
Windows DNS Server Denial of Service Vulnerability
...
Chromium: CVE-2022-2294 Heap buffer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...