28326 matches found
Chromium: CVE-2024-9962 Inappropriate implementation in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Teams for Android Information Disclosure Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Overlay Filter Elevation of Privilege Vulnerability
...
Active Directory Certificate Services Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Windows AppX Installer Spoofing Vulnerability
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emotet/Trickbot/Bazaloader. An attacker...
OpenSSL: CVE-2021-3711 SM2 Decryption Buffer Overflow
...
Chromium: CVE-2021-38000 Insufficient validation of untrusted input in Intents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that exploits for this vulnerability exist in the wild...
Windows Graphics Component Remote Code Execution Vulnerability
...
VP9 Video Extensions Remote Code Execution Vulnerability
...
Web Media Extensions Remote Code Execution Vulnerability
...
Microsoft splwow64 Elevation of Privilege Vulnerability
...
'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
...
Windows Hyper-V Information Disclosure Vulnerability
...
Windows Setup Files Cleanup Remote Code Execution Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
Microsoft Guidance for Vulnerability in Trusted Platform Module (TPM)
Executive Summary This advisory addresses CVE-2019-16863. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key confidentiality protection for a specific algorithm ECDSA. It is important to note that this is a TPM firmware vulnerability, an...
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Power BI Report Server Spoofing Vulnerability
...
Windows Enterprise App Management Service Remote Code Execution Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Chromium CVE-2021-21149: Stack overflow in Data Transfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
...
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
...
HTTP Protocol Stack Remote Code Execution Vulnerability
...
Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, becaus...
SMB Client and Server Remote Code Execution Vulnerability
...
Windows Hyper-V Information Disclosure Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Encryption Key Negotiation of Bluetooth Vulnerability
Executive Summary Microsoft is aware of the Bluetooth BR/EDR basic rate/enhanced data rate, known as "Bluetooth Classic" key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key...
Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Windows TCP/IP Denial of Service Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Windows Data Sharing Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafte...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Chromium: CVE-2024-8035 Inappropriate implementation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...