23108 matches found
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
...
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
...
Windows Event Tracing Remote Code Execution Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Windows Shell Remote Code Execution Vulnerability
Use after free in Windows Shell allows an unauthorized attacker to execute code locally...
Azure DevOps Server Remote Code Execution Vulnerability
...
Remote Procedure Call Runtime Denial of Service Vulnerability
...
Windows Cryptographic Information Disclosure Vulnerability
...
Windows ALPC Elevation of Privilege Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows Print Spooler Information Disclosure Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
An information disclosure vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. ...
Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first...
Microsoft PowerShell Remote Code Execution Vulnerability
A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could execute malicious code on a vulnerable system. To exploit the vulnerability, an attacker must send a specially crafted file to a...
CredSSP Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the Credential Security Support Provider protocol CredSSP. An attacker who successfully exploited this vulnerability could relay user credentials and use them to execute code on the target system. CredSSP is an authentication provider which processe...
Code Integrity Guard Security Feature Bypass Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows CryptoAPI Spoofing Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Power BI Remote Code Execution Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...
Microsoft Defender Security Feature Bypass Vulnerability
...
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Service Fabric Explorer Spoofing Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Update Medic Service Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21206 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Microsoft is aware of reports that exploits for CVE-2021-21206 exist in the wild...
Git for Visual Studio Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
DHCP Server Service Denial of Service Vulnerability
...
Microsoft Outlook Information Disclosure Vulnerability
...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Windows PlayToManager Elevation of Privilege Vulnerability
...
Scripting Engine Memory Corruption Vulnerability
...
Skype for Business and Lync Spoofing Vulnerability
...
Internet Explorer Memory Corruption Vulnerability
...
Windows SMBv3 Client/Server Denial of Service Vulnerability
A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests. An authenticated attacker who successfully exploited this vulnerability against an SMB Server could cause the affected system to crash. An unauthenticated...
Windows SmartScreen Security Feature Bypass Vulnerability
...
Chromium: CVE-2023-5485 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-5483 Inappropriate implementation in Intents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...