23108 matches found
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Microsoft Office Spoofing Vulnerability
...
.NET Spoofing Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Virtual Machine IDE Drive Elevation of Privilege Vulnerability
...
Microsoft Excel Security Feature Bypass Vulnerability
...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Windows Graphics Component Font Parsing Remote Code Execution Vulnerability
...
Chromium CVE-2021-21156: Heap buffer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21154 Heap buffer overflow in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SQL Server Agent Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server Engine when SQL Server Agent incorrectly checks ACLs on atxcore.dll. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully...
Windows USB Hub Driver Remote Code Execution Vulnerability
...
Azure Stack Hub Spoofing Vulnerability
...
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21153 Stack overflow in GPU Process
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft IIS Server XSS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to properly sanitize a specially crafted request. An attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of...
Microsoft Office Elevation of Privilege Vulnerability
...
Skype for Consumer Remote Code Execution Vulnerability
...
Chromium: CVE-2023-5478 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
3D Builder Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Storage Elevation of Privilege Vulnerability
...
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Chromium: CVE-2022-0806 Data leak in Canvas
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-38003 Inappropriate implementation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that exploits for this vulnerability exist in the wild...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Dynamics Business Central Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Dynamics Business Central. An attacker who successfully exploited this vulnerability could execute arbitrary shell commands on victim's server. To exploit the vulnerability, an authenticated attacker needs to convince the victim into conne...
ASP.NET Core Remote Code Execution Vulnerability
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle client deleted connections. An attacker who successfully exploited the vulnerability could run arbitrary code in memory on the server. Exploitation of the vulnerability requires that a user...
Windows SMB Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests. An authenticated attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server. To exploit the...
Windows COM Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows COM Aggregate Marshaler. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
DHCP Server Service Information Disclosure Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
.NET Framework Remote Code Execution Vulnerability
...
GitHub: CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI
...
Microsoft Excel Information Disclosure Vulnerability
...
Windows Local Session Manager (LSM) Denial of Service Vulnerability
...
Chromium: CVE-2022-0976 Heap buffer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
BitLocker Security Feature Bypass Vulnerability
...
Chromium: CVE-2021-21194 Use after free in screen capture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Container Execution Agent Elevation of Privilege Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...