28326 matches found
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Digital TV Tuner device registration application Elevation of Privilege Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
ASP.NET Core Remote Code Execution Vulnerability
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle client deleted connections. An attacker who successfully exploited the vulnerability could run arbitrary code in memory on the server. Exploitation of the vulnerability requires that a user...
3D Builder Remote Code Execution Vulnerability
...
Microsoft Excel Information Disclosure Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0976 Heap buffer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Container Execution Agent Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21155: Heap buffer overflow in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
A flaw in Node.js Permission Model enforcement allows `trace_events.createTracing().enable()` Writes Trace Logs Outside `--allow-fs-write`. This can lead to confidentiality impact or bypass of the intended security boundary under affected configurations. This vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.
...
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Chromium: CVE-2023-5478 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Remote Code Execution Vulnerability
...
Azure Service Fabric Container Elevation of Privilege Vulnerability
...
Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Windows DNS Elevation of Privilege Vulnerability
...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Chromium: CVE-2021-21194 Use after free in screen capture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Dynamics Business Central Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Dynamics Business Central. An attacker who successfully exploited this vulnerability could execute arbitrary shell commands on victim's server. To exploit the vulnerability, an authenticated attacker needs to convince the victim into conne...
Microsoft Outlook Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Outlook improperly handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary commands. In a file-sharing attack scenario, an attacker could provide a specially crafted document file...
Windows COM Elevation of Privilege Vulnerability
An elevation of privilege exists in Windows COM Aggregate Marshaler. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability...
Microsoft SQL Server Agent Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server Engine when SQL Server Agent incorrectly checks ACLs on atxcore.dll. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully...
Microsoft SQL OLE DB Remote Code Execution Vulnerability
...
CERT/CC: CVE-2023-1017 TPM2.0 Module Library Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows GDI+ Remote Code Execution Vulnerability
...
Windows Storage Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Server Service Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3057 Inappropriate implementation in iframe Sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-3039 Use after free in WebSQL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21191: Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass
...
.NET and Visual Studio Denial of Service Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-4174 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...