28326 matches found
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Windows PlayToManager Elevation of Privilege Vulnerability
...
Windows Print Spooler Information Disclosure Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows SMBv3 Client/Server Denial of Service Vulnerability
A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests. An authenticated attacker who successfully exploited this vulnerability against an SMB Server could cause the affected system to crash. An unauthenticated...
Chromium: CVE-2026-84329 Confused deputy in CredentialProvider
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12469 Uninitialized Use in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Skype for Consumer Remote Code Execution Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Service Fabric Explorer Spoofing Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Skype for Business and Lync Spoofing Vulnerability
...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
Internet Explorer Memory Corruption Vulnerability
...
Chromium CVE-2021-21156: Heap buffer overflow in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21153 Stack overflow in GPU Process
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-5485 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-0806 Data leak in Canvas
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Windows SMB Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests. An authenticated attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server. To exploit the...
CredSSP Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the Credential Security Support Provider protocol CredSSP. An attacker who successfully exploited this vulnerability could relay user credentials and use them to execute code on the target system. CredSSP is an authentication provider which processe...
Chromium: CVE-2026-84323 Missing authorization in FileSystem
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office Elevation of Privilege Vulnerability
...
DHCP Server Service Denial of Service Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
DHCP Server Service Information Disclosure Vulnerability
...
Microsoft Defender Security Feature Bypass Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Chromium: CVE-2021-21154 Heap buffer overflow in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-84355 Incorrect authorization in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.
...
Microsoft Power Automate Desktop Information Disclosure Vulnerability
Uncontrolled search path element in Power Automate allows an authorized attacker to disclose information over a network...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows SmartScreen Security Feature Bypass Vulnerability
...
Chromium: CVE-2023-5483 Inappropriate implementation in Intents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-5217 exists in the wild...
3D Builder Remote Code Execution Vulnerability
...
GitHub: CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI
...