28326 matches found
Windows NTLM Elevation of Privilege Vulnerability
...
Microsoft Teams Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Teams allows an unauthorized attacker to execute code over a network...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Azure Batch Node Agent Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Remote Access Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Remote Access improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Defender Credential Guard Elevation of Privilege Vulnerability
...
.NET Framework Denial of Service Vulnerability
...
Microsoft Guidance for Enabling LDAP Channel Binding and LDAP Signing
Executive Summary LDAP channel binding and LDAP signing provide ways to increase the security for communications between LDAP clients and Active Directory domain controllers. A set of unsafe default configurations for LDAP channel binding and LDAP signing exist on Active Directory domain...
Microsoft Office Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
Microsoft SQL Server Remote Code Execution Vulnerability
...
Insight Software: CVE-2022-29972 Magnitude Simba Amazon Redshift ODBC Driver
...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Task Scheduler Elevation of Privilege Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30632 Out of bounds write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Defender Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticate...
Chromium: CVE-2022-3075 Insufficient data validation in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reportsrts that an exploit for CVE-2022-3075 exists in the wild...
Sysinternals PsExec Elevation of Privilege Vulnerability
...
.NET Denial of Service Vulnerability
...
.NET and Visual Studio Denial of Service Vulnerability
...
Windows TCP/IP Denial of Service Vulnerability
...
Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Excel Security Feature Bypass Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
Windows Remote Access Connection Manager Information Disclosure Vulnerability
...
Chromium: CVE-2021-30554 Use after free in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Microsoft is aware of reports that exploits for CVE-2021-30554 exist in the wild...
Microsoft Edge for Android Information Disclosure Vulnerability
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...
Security Center Broker Information Disclosure Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Chromium: CVE-2026-13865 Insufficient validation of untrusted input in Enterprise
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows TCP/IP Driver Denial of Service Vulnerability
...
Intel: CVE-2022-21127 Special Register Buffer Data Sampling Update (SRBDS Update)
...
Windows DNS Server Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0609 Use after free in Animation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reports that an exploit for CVE-2022-0609 exists in the wild...
Chromium: CVE-2021-21220 Insufficient validation of untrusted input in V8 for x86_64
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Microsoft is aware of reports that exploits for CVE-2021-21220 exist in the wild...
CVE-2026-19146 Uninitialized Use in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...