28326 matches found
Microsoft IIS Server XSS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to properly sanitize a specially crafted request. An attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
.NET Framework Remote Code Execution Vulnerability
...
ASP.NET Core and Visual Studio Information Disclosure Vulnerability
...
Chromium: CVE-2021-21150 Use after free in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2020-16044: Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio JSON Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
SQL RDBMS Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Windows Authentication Remote Code Execution Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Bluetooth Driver Spoofing Vulnerability
...
Microsoft Edge Copilot Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command 'command injection' in Copilot Chat Microsoft Edge allows an unauthorized attacker to execute code over a network...
Microsoft Word Remote Code Execution Vulnerability
...
Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability
...
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
...
Windows Point-to-Point Tunneling Protocol Denial of Service Vulnerability
...
Windows Point-to-Point Protocol (PPP) Denial of Service Vulnerability
...
Windows Event Tracing Remote Code Execution Vulnerability
...
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
...
Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Office Spoofing Vulnerability
...
.NET Spoofing Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
HTTP Protocol Stack Remote Code Execution Vulnerability
...
Windows BitLocker Security Feature Bypass Vulnerability
...
Chromium: CVE-2021-21206 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Microsoft is aware of reports that exploits for CVE-2021-21206 exist in the wild...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office that could be exploited when a user opens a file containing a malformed graphics image or when a user inserts a malformed graphics image into an Office file. Such a file could also be included in an email attachment. An attacker cou...
Visual Studio Code Elevation of Privilege Vulnerability
Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally...
Microsoft Defender Security Feature Bypass Vulnerability
...
Mitre: CVE-2023-24023 Bluetooth Vulnerability
Microsoft is aware of the Bluetooth Forward and Future Secrecy Attacks and Defenses BLUFFS vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that enforces the us...
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Excel Security Feature Bypass Vulnerability
...
Git for Visual Studio Remote Code Execution Vulnerability
...
.NET Core and Visual Studio Denial of Service Vulnerability
...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Visual Studio Code Python Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads configuration files after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wi...
Windows Defender Antimalware Platform Hard Link Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first...