24507 matches found
.NET Denial of Service Vulnerability
...
Power BI Report Server Spoofing Vulnerability
...
Windows Hyper-V Information Disclosure Vulnerability
...
Intel: CVE-2022-21127 Special Register Buffer Data Sampling Update (SRBDS Update)
...
Windows TCP/IP Denial of Service Vulnerability
...
Windows SMB Information Disclosure Vulnerability
...
Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
...
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
...
'max-global-quota' reset by DNSSEC validation restarts
...
Microsoft Word Remote Code Execution Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Windows AppX Installer Spoofing Vulnerability
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malware family known as Emotet/Trickbot/Bazaloader. An attacker...
Web Media Extensions Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Privacy/configuration issue when adding local data in views through 'unbound-control'
...
Chromium: CVE-2024-7975 Inappropriate implementation in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2024-8035 Inappropriate implementation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
...
Windows Overlay Filter Elevation of Privilege Vulnerability
...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, becaus...
Azure Storage Library Information Disclosure Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
Memory corruption could lead to crash and denial of service
...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
...
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Remote Desktop Client Remote Code Execution Vulnerability
...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
Windows Data Sharing Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafte...
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
...
Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
...
'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
...
Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
...
Microsoft Edge for iOS Spoofing Vulnerability
...
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
OpenSSL: CVE-2021-3711 SM2 Decryption Buffer Overflow
...
Microsoft Guidance for Rogue System Register Read
Executive Summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On May 21,...
Packet of death for a DNSCrypt misconfigured Unbound
...
Possible heap use-after-free in an error path when a DoT forwarded query is jostled out
...
DNS Cookie bypass when combined with proxy-protocol use
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...