23108 matches found
3D Viewer Remote Code Execution Vulnerability
...
.NET Core and Visual Studio Denial of Service Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft Guidance for cleaning up orphaned keys generated on vulnerable TPMs and used for Windows Hello for Business
Microsoft is aware of an issue in Windows Hello for Business WHfB with public keys that persist after a device is removed from Active Directory, if the AD exists. After a user sets up Windows Hello for Business WHfB, the WHfB public key is written to the on-premises Active Directory. The WHfB key...
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
This CVE was assigned by Intel. Please see CVE-2023-28746 on CVE.org for more information...
Visual Studio Code Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
Windows CryptoAPI Spoofing Vulnerability
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
Chromium: CVE-2026-13933 Insufficient policy enforcement in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0790 Use after free in Cast UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Bluetooth Driver Spoofing Vulnerability
...
Chromium: CVE-2021-21150 Use after free in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio JSON Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded. The security update address...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office that could be exploited when a user opens a file containing a malformed graphics image or when a user inserts a malformed graphics image into an Office file. Such a file could also be included in an email attachment. An attacker cou...
SQL RDBMS Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Windows Authentication Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
HTTP Protocol Stack Remote Code Execution Vulnerability
...
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21152 Heap buffer overflow in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Visual Studio Code Python Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wi...
Microsoft Exchange Server Spoofing Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Windows Kernel Memory Information Disclosure Vulnerability
...
Windows Resilient File System Elevation of Privilege
...