24507 matches found
Win32k Elevation of Privilege Vulnerability
...
.NET and Visual Studio Denial of Service Vulnerability
...
Chromium: CVE-2026-14058 Policy bypass in Parser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13933 Insufficient policy enforcement in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PowerPoint for Android Spoofing Vulnerability
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Teams Remote Code Execution Vulnerability
...
Visual Studio Code Spoofing Vulnerability
...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Windows Setup Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or...
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
This CVE was assigned by Intel. Please see CVE-2023-28746 on CVE.org for more information...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Chromium CVE-2020-16044: Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
Windows LSA Spoofing Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
...
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
...
Chromium: CVE-2021-21150 Use after free in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET Core and Visual Studio Denial of Service Vulnerability
...
Microsoft Guidance for cleaning up orphaned keys generated on vulnerable TPMs and used for Windows Hello for Business
Microsoft is aware of an issue in Windows Hello for Business WHfB with public keys that persist after a device is removed from Active Directory, if the AD exists. After a user sets up Windows Hello for Business WHfB, the WHfB public key is written to the on-premises Active Directory. The WHfB key...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
HTTP Protocol Stack Remote Code Execution Vulnerability
...
Visual Studio JSON Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability
CVE-2026-6727 is an Information Disclosure vulnerability in the TPM 2.0 reference implementation involving an RSA OAEP timing side channel. MITRE assigned this CVE on behalf of the Trusted Computing Group. This document incorporates updates to Microsoft Windows that address this vulnerability...
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Microsoft Bluetooth Driver Spoofing Vulnerability
...
Visual Studio Code Python Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wi...
Windows CryptoAPI Spoofing Vulnerability
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office that could be exploited when a user opens a file containing a malformed graphics image or when a user inserts a malformed graphics image into an Office file. Such a file could also be included in an email attachment. An attacker cou...
SQL RDBMS Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...