23108 matches found
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
3D Builder Remote Code Execution Vulnerability
...
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
...
Windows GDI+ Remote Code Execution Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft Outlook Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Outlook improperly handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file...
Microsoft PowerPoint for Android Spoofing Vulnerability
Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Azure Service Fabric Container Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows DNS Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21155: Heap buffer overflow in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-5479 Inappropriate implementation in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack
...
Microsoft Office Security Feature Bypass Vulnerability
...
Microsoft SQL OLE DB Remote Code Execution Vulnerability
...
Microsoft Defender Denial of Service Vulnerability
...
CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability
...
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
...
Windows Overlay Filter Information Disclosure Vulnerability
...
NuGet Client Elevation of Privilege Vulnerability
...
StorSimple 8000 Series Elevation of Privilege Vulnerability
...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Chromium CVE-2021-21191: Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows GDI Elevation of Privilege Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Windows Server Service Elevation of Privilege Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21151 Use after free in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
To comprehensively address the vulnerability identified by CVE-2020-17103 and recently publicly referred to as "Mini-Plasma" Microsoft recommends installing the June 2026 updates for your Windows operating systems...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Windows File Explorer Spoofing Vulnerability
Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...
3D Builder Remote Code Execution Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Windows Local Security Authority (LSA) Denial of Service Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Chromium: CVE-2021-21118 Insufficient data validation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...