28326 matches found
Windows CryptoAPI Spoofing Vulnerability
A spoofing vulnerability exists in the way Windows CryptoAPI Crypt32.dll validates Elliptic Curve Cryptography ECC certificates. An attacker could exploit the vulnerability by using a spoofed code-signing certificate to sign a malicious executable, making it appear the file was from a trusted,...
Microsoft Exchange Server Spoofing Vulnerability
...
Windows Cryptographic Information Disclosure Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows COM+ Event System Service Elevation of Privilege Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21152 Heap buffer overflow in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Shell Remote Code Execution Vulnerability
Use after free in Windows Shell allows an unauthorized attacker to execute code locally...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Azure DevOps Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Remote Procedure Call Runtime Denial of Service Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
...
Windows ALPC Elevation of Privilege Vulnerability
...
Windows Kernel Memory Information Disclosure Vulnerability
...
Windows Resilient File System Elevation of Privilege
...
Windows DNS Server Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0790 Use after free in Cast UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft ASP.NET Core Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Microsoft ASP.NET Core parses encoded cookie names. The ASP.NET Core cookie parser decodes entire cookie strings which could allow a malicious attacker to set a second cookie with the name being percent encoded. The security update address...
Microsoft PowerShell Remote Code Execution Vulnerability
A remote code execution vulnerability exists when PowerShell improperly handles specially crafted files. An attacker who successfully exploited this vulnerability could execute malicious code on a vulnerable system. To exploit the vulnerability, an attacker must send a specially crafted file to a...
Visual Studio Remote Code Execution Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows CryptoAPI Spoofing Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
NuGet Client Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Windows Update Medic Service Elevation of Privilege Vulnerability
...
Power BI Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Code Integrity Guard Security Feature Bypass Vulnerability
...
Windows USB Hub Driver Remote Code Execution Vulnerability
...
Azure Stack Hub Spoofing Vulnerability
...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows GDI Elevation of Privilege Vulnerability
...
Virtual Machine IDE Drive Elevation of Privilege Vulnerability
...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists ACLs on multiple system files, including the Security Accounts Manager SAM database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An...
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
An information disclosure vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. ...
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...