24507 matches found
Open Source Curl Remote Code Execution Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user. This update addresses this vulnerability. To prevent these types of attacks, Microsoft recommends customers to download inline images from...
Microsoft HoloLens Remote Code Execution Vulnerabilities
Executive Summary Microsoft is aware of vulnerabilities that affect the Broadcom wireless chipset included in the Microsoft HoloLens device. The vulnerabilities could allow an unauthenticated attacker in physical proximity to cause a denial of service condition or execute code on a target system...
A wildcard replay, as another piece of data, triggers poisoning in the serve expired reply path
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Windows Error Reporting Service Elevation of Privilege Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Microsoft Power BI Spoofing Vulnerability
...
Windows Media Center Update Denial of Service Vulnerability
...
Chromium: CVE-2021-37973 Use after free in Portals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2021-37973 exists in the wild...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
...
Chromium CVE-2021-21157: Use after free in Web Sockets
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SQL Server Reporting Services Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in SQL Server Reporting Services SSRS when the server improperly validates attachments uploaded to reports. An attacker who successfully exploited this vulnerability could upload file types that were disallowed by an administrator. To exploit the...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
...
Document Intelligence Studio On-Prem Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure allows an unauthorized attacker to elevate privileges over a network...
Visual Studio Code Elevation of Privilege Vulnerability
Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally...
Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Apache Log4j Remote Code Execution Vulnerability
Certain versions of Apache Log4j2 are vulnerable to a remote code execution vulnerability. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. Microsoft is not aware of any impact to th...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Base3D Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Base3D rendering engine...
Guidance to mitigate speculative execution side-channel vulnerabilities
NOTE This advisory was revised on July 10, 2018. Some content has been removed for simplicity and because it is no longer relevant. You can view the archived content for ADV180002 in the FAQ section following the Affected Products table. Executive Summary Microsoft is aware of a new publicly...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Event Tracing for Windows Information Disclosure Vulnerability
...
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an...
Microsoft Office Remote Code Execution Vulnerability
...
Chromium: CVE-2022-3196 Use after free in PDF
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Site Recovery Information Disclosure Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...