23108 matches found
Microsoft SharePoint Remote Code Execution Vulnerability
...
Microsoft Browser Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Browsers fail to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended. To exploit this vulnerability, a...
Chromium: CVE-2024-7976 Inappropriate implementation in FedCM
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Service Fabric Explorer Spoofing Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Azure Arc-enabled Kubernetes cluster Connect Elevation of Privilege Vulnerability
Microsoft has identified a vulnerability affecting the cluster connect feature of Azure Arc-enabled Kubernetes clusters. This vulnerability could allow an unauthenticated user to elevate their privileges and potentially gain administrative control over the Kubernetes cluster. Additionally, becaus...
Windows Graphics Component Information Disclosure Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
Microsoft Guidance for Rogue System Register Read
Executive Summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On May 21,...
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally...
Chromium: CVE-2024-8035 Inappropriate implementation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
...
Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
Chromium: CVE-2024-7975 Inappropriate implementation in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Open Management Infrastructure Remote Code Execution Vulnerability
...
Remote Desktop Client Remote Code Execution Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
Microsoft Edge for iOS Spoofing Vulnerability
...
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
...
MITRE: CVE-2023-50387 DNSSEC verification complexity can be exploited to exhaust CPU resources and stall DNS resolvers
...
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.
...
Windows Print Spooler Remote Code Execution Vulnerability
...
Web Media Extensions Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Microsoft Power BI Spoofing Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Windows Media Center Update Denial of Service Vulnerability
...
OpenSSL: CVE-2021-3711 SM2 Decryption Buffer Overflow
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft HoloLens Remote Code Execution Vulnerabilities
Executive Summary Microsoft is aware of vulnerabilities that affect the Broadcom wireless chipset included in the Microsoft HoloLens device. The vulnerabilities could allow an unauthenticated attacker in physical proximity to cause a denial of service condition or execute code on a target system...
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure allows an unauthorized attacker to elevate privileges over a network...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21157: Use after free in Web Sockets
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Guidance to mitigate speculative execution side-channel vulnerabilities
NOTE This advisory was revised on July 10, 2018. Some content has been removed for simplicity and because it is no longer relevant. You can view the archived content for ADV180002 in the FAQ section following the Affected Products table. Executive Summary Microsoft is aware of a new publicly...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...