24507 matches found
Skype for Consumer Remote Code Execution Vulnerability
...
Microsoft Office Elevation of Privilege Vulnerability
...
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
...
DHCP Server Service Information Disclosure Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0976 Heap buffer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows BitLocker Security Feature Bypass Vulnerability
...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Dynamics Business Central Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Dynamics Business Central. An attacker who successfully exploited this vulnerability could execute arbitrary shell commands on victim's server. To exploit the vulnerability, an authenticated attacker needs to convince the victim into conne...
Microsoft IIS Server XSS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to properly sanitize a specially crafted request. An attacker who successfully exploited this vulnerability could then perform cross-site scripting attacks on affected systems and run script in the security context of...
Microsoft SQL Server Agent Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server Engine when SQL Server Agent incorrectly checks ACLs on atxcore.dll. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully...
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Chromium: CVE-2023-5478 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Excel Information Disclosure Vulnerability
...
GitHub: CVE-2022-39327 Improper Control of Generation of Code ('Code Injection') in Azure CLI
...
Windows Storage Elevation of Privilege Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Chromium: CVE-2022-0806 Data leak in Canvas
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21194 Use after free in screen capture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Container Execution Agent Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21155: Heap buffer overflow in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Outlook Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Outlook improperly handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file...
Windows COM Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows COM Aggregate Marshaler. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability...
A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
Azure Service Fabric Container Elevation of Privilege Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows GDI+ Remote Code Execution Vulnerability
...
Windows Local Session Manager (LSM) Denial of Service Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) client identities to be reused across requests configured with different client certificates. This vulnerability affects Node.js **26.x**, **24.x**, and **22.x**.
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack
...
Microsoft Office Security Feature Bypass Vulnerability
...
Windows Overlay Filter Information Disclosure Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Group Policy Preference Client Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-5479 Inappropriate implementation in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...