24507 matches found
Windows SmartScreen Security Feature Bypass Vulnerability
...
Windows Media Remote Code Execution Vulnerability
...
GitHub: CVE-2022-39253 Local clone optimization dereferences symbolic links by default
...
Microsoft Exchange Server Spoofing Vulnerability
...
.NET Framework Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft .NET Framework processes untrusted input. An attacker who successfully exploited this vulnerability in software using the .NET framework could take control of an affected system. An attacker could then install programs; view, change, or...
Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SQL OLE DB Remote Code Execution Vulnerability
...
GitHub: CVE-2022-41953 Git GUI Clone Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Secure Boot Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in secure boot. An attacker who successfully exploited the vulnerability can bypass secure boot and load untrusted software. To exploit the vulnerability, an attacker could run a specially crafted application. The security update addresses the...
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Active Directory Certificate Services Elevation of Privilege Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Visual Studio Code Remote Development Extension Remote Code Execution Vulnerability
...
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30561 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2024-9962 Inappropriate implementation in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Graphics Component Remote Code Execution Vulnerability
...
Microsoft splwow64 Elevation of Privilege Vulnerability
...
Intel: CVE-2022-0001 Branch History Injection
This CVE was assigned by Intel. Please see CVE-2022-0001 on CVE.org for more information...
Windows Overlay Filter Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-38000 Insufficient validation of untrusted input in Intents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that exploits for this vulnerability exist in the wild...
3D Viewer Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-0797 Out of bounds memory access in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Chromium CVE-2021-21149: Stack overflow in Data Transfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Guidance to mitigate Microarchitectural Data Sampling vulnerabilities
Executive Summary On May 14, 2019, Intel published information about a new subclass of speculative execution side channel vulnerabilities known as Microarchitectural Data Sampling. An attacker who successfully exploited these vulnerabilities may be able to read privileged data across trust...
Chromium: CVE-2024-7976 Inappropriate implementation in FedCM
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
Microsoft Teams for Android Information Disclosure Vulnerability
...
Windows Hyper-V Information Disclosure Vulnerability
...
Windows Enterprise App Management Service Remote Code Execution Vulnerability
...
VP9 Video Extensions Remote Code Execution Vulnerability
...
Microsoft Browser Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended. To exploit this vulnerability, a...
Windows Setup Files Cleanup Remote Code Execution Vulnerability
...
Service Fabric Explorer Spoofing Vulnerability
...
HTTP Protocol Stack Remote Code Execution Vulnerability
...
SMB Client and Server Remote Code Execution Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Microsoft Guidance for Vulnerability in Trusted Platform Module (TPM)
Executive Summary This advisory addresses CVE-2019-16863. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key confidentiality protection for a specific algorithm ECDSA. It is important to note that this is a TPM firmware vulnerability, an...