23108 matches found
Windows Error Reporting Service Elevation of Privilege Vulnerability
...
Windows Deployment Services Information Disclosure Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Apache Log4j Remote Code Execution Vulnerability
Certain versions of Apache Log4j2 are vulnerable to a remote code execution vulnerability. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Microsoft is not aware of any impact to th...
Chromium: CVE-2021-37973 Use after free in Portals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2021-37973 exists in the wild...
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an...
Windows Data Sharing Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially crafte...
Event Tracing for Windows Information Disclosure Vulnerability
...
Azure Site Recovery Information Disclosure Vulnerability
...
Base3D Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Base3D rendering engine...
SQL Server Reporting Services Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in SQL Server Reporting Services SSRS when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator. To exploit the...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Teams Remote Code Execution Vulnerability
...
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability
...
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3196 Use after free in PDF
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows DNS Server Remote Code Execution Vulnerability
...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Windows DNS Server Remote Code Execution Vulnerability
...
Windows Error Reporting Service Elevation of Privilege Vulnerability
...
Windows LSA Spoofing Vulnerability
...
.NET and Visual Studio Denial of Service Vulnerability
...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
Visual Studio Code Spoofing Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Setup Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or...
Chromium: CVE-2026-14058 Policy bypass in Parser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Elevation of Privilege Vulnerability
Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
...
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
Chromium CVE-2020-16044: Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Microsoft Excel Remote Code Execution Vulnerability
...