28326 matches found
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Deployment Services Information Disclosure Vulnerability
...
CERT/CC: CVE-2023-1018 TPM2.0 Module Library Elevation of Privilege Vulnerability
...
Event Tracing for Windows Information Disclosure Vulnerability
...
Windows Media Center Update Denial of Service Vulnerability
...
Windows WLAN AutoConfig Service Remote Code Execution Vulnerability
...
Chromium CVE-2021-21157: Use after free in Web Sockets
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Base3D Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Base3D rendering engine...
Windows Setup Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or...
Microsoft Guidance for Rogue System Register Read
Executive Summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On May 21,...
Windows Error Reporting Service Elevation of Privilege Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Microsoft Edge for Android Spoofing Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Windows Infrared Data Association (IrDA) Information Disclosure Vulnerability
...
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an...
Chromium: CVE-2026-84331 Incorrect authorization in Actor
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84359 Information leak in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Elevation of Privilege Vulnerability
Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2024-7978 Insufficient policy enforcement in Data Transfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Azure Site Recovery Information Disclosure Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Visual Studio Code Spoofing Vulnerability
...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Microsoft Teams Remote Code Execution Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Chromium: CVE-2026-84358 Improper privilege management in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-14058 Policy bypass in Parser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13933 Insufficient policy enforcement in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows DNS Server Remote Code Execution Vulnerability
...
Windows Error Reporting Service Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Windows LSA Spoofing Vulnerability
...
Scripting Engine Memory Corruption Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft Guidance for cleaning up orphaned keys generated on vulnerable TPMs and used for Windows Hello for Business
Microsoft is aware of an issue in Windows Hello for Business WHfB with public keys that persist after a device is removed from Active Directory, if the AD exists. After a user sets up Windows Hello for Business WHfB, the WHfB public key is written to the on-premises Active Directory. The WHfB key...