21727 matches found
Chromium CVE-2021-21147: Inappropriate implementation in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Remote Code Execution Vulnerability
...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
GitHub Copilot and Visual Studio Code Remote Code Execution Vulnerability
Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to execute code over a network...
Windows Hyper-V Remote Code Execution Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2023-5477 Inappropriate implementation in Installer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Graphics Component Elevation of Privilege Vulnerability
...
Event Tracing for Windows Information Disclosure Vulnerability
...
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
...
Windows Distributed File System (DFS) Information Disclosure Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Clipboard User Service Elevation of Privilege Vulnerability
...
Microsoft SharePoint Information Disclosure Vulnerability
...
Windows Wireless Networking Information Disclosure Vulnerability
...
Chromium: CVE-2021-21223 Integer overflow in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Package Managers Configurations Remote Code Execution Vulnerability
Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code execution. We believe...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Microsoft OneDrive Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...
Microsoft Bluetooth Driver Spoofing Vulnerability
...
Mitre: CVE-2023-24023 Bluetooth Vulnerability
Microsoft is aware of the Bluetooth Forward and Future Secrecy Attacks and Defenses BLUFFS vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that enforces the us...
MITRE: CVE-2023-44487 HTTP/2 Rapid Reset Attack
...
Microsoft Edge (Chromium-based) Tampering Vulnerability
...
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
...
Print 3D Remote Code Execution Vulnerability
...
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
...
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-2295 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...
Chromium CVE-2021-21123: Insufficient data validation in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...
Windows SAM and LSAD Downgrade Vulnerability
An elevation of privilege vulnerability exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD remote protocols when they accept authentication levels that do not protect them adequately. The vulnerability is caused by the way the SAM and LSAD remote protocols...
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
...
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Chromium: CVE-2022-4135 Heap buffer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2022-4135 exists in the wild...
Microsoft Excel Remote Code Execution Vulnerability
...
OpenSSL: CVE-2022-3602 X.509 certificate verification buffer overrun
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0809 Out of bounds memory access in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows SSDP Service Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21139: Inappropriate implementation in iframe sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Encryption Key Negotiation of Bluetooth Vulnerability
Executive Summary Microsoft is aware of the Bluetooth BR/EDR basic rate/enhanced data rate, known as "Bluetooth Classic" key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key...
Azure Local Elevation of Privilege Vulnerability
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...