28326 matches found
Guidance to mitigate speculative execution side-channel vulnerabilities
NOTE This advisory was revised on July 10, 2018. Some content has been removed for simplicity and because it is no longer relevant. You can view the archived content for ADV180002 in the FAQ section following the Affected Products table. Executive Summary Microsoft is aware of a new publicly...
Possible heap use-after-free in an error path when a DoT forwarded query is jostled out
...
Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
...
'max-global-quota' reset by DNSSEC validation restarts
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Office Defense in Depth Update
Microsoft has released an update for Microsoft Office that provides enhanced security as a defense in depth measure...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Windows Overlay Filter Elevation of Privilege Vulnerability
...
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
...
Privacy/configuration issue when adding local data in views through 'unbound-control'
...
Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
...
M365 Copilot for Desktop Spoofing Vulnerability
Improper access control in M365 Copilot for Desktop allows an unauthorized attacker to perform spoofing locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2024-7975 Inappropriate implementation in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge for iOS Spoofing Vulnerability
...
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
...
Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Azure Storage Library Information Disclosure Vulnerability
...
Microsoft Power BI Spoofing Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from...
Microsoft HoloLens Remote Code Execution Vulnerabilities
Executive Summary Microsoft is aware of vulnerabilities that affect the Broadcom wireless chipset included in the Microsoft HoloLens device. The vulnerabilities could allow an unauthenticated attacker in physical proximity to cause a denial of service condition or execute code on a target system...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
DNS Cookie bypass when combined with proxy-protocol use
...
Memory corruption could lead to crash and denial of service
...
Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure allows an unauthorized attacker to elevate privileges over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
...
A use after free vulnerability exists in curl <7.87.0. Curl can be asked to *tunnel* virtually all protocols it supports through an HTTP proxy. HTTP proxies can (and often do) deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET curl would use a heap-allocated struct after it had been freed in its transfer shutdown code path.
...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
.NET and Visual Studio Denial of Service Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
SQL Server Reporting Services Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in SQL Server Reporting Services SSRS when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator. To exploit the...
Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
...
Packet of death for a DNSCrypt misconfigured Unbound
...
A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Apache Log4j Remote Code Execution Vulnerability
Certain versions of Apache Log4j2 are vulnerable to a remote code execution vulnerability. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Microsoft is not aware of any impact to th...
Chromium: CVE-2021-37973 Use after free in Portals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2021-37973 exists in the wild...
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...