24507 matches found
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
...
Chromium: CVE-2022-1310 Use after free in regular expressions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21218 Uninitialized Use in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Remote Desktop Client Remote Code Execution Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
OpenSSL: CVE-2022-3602 X.509 certificate verification buffer overrun
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Windows Partition Management Driver Elevation of Privilege Vulnerability
...
Windows NT OS Kernel Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Clipboard User Service Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Wireless Networking Information Disclosure Vulnerability
...
Chromium CVE-2021-21142: Use after free in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...
Encryption Key Negotiation of Bluetooth Vulnerability
Executive Summary Microsoft is aware of the Bluetooth BR/EDR basic rate/enhanced data rate, known as "Bluetooth Classic" key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key...
Windows Hyper-V Remote Code Execution Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to execute code over a network...
Azure Local Elevation of Privilege Vulnerability
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...
Remote Desktop Client Remote Code Execution Vulnerability
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network...
Print 3D Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-2295 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Win32k Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Package Managers Configurations Remote Code Execution Vulnerability
Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code execution. We believe...
System Center Operations Manager Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21147: Inappropriate implementation in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Remote Code Execution Vulnerability
...
Microsoft OneDrive Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...
Windows SMB Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited this vulnerability could craft a special packet, which could lead to information disclosure from the server. To explo...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
.NET and Visual Studio Denial of Service Vulnerability
...
Microsoft Bluetooth Driver Spoofing Vulnerability
...
Mitre: CVE-2023-24023 Bluetooth Vulnerability
Microsoft is aware of the Bluetooth Forward and Future Secrecy Attacks and Defenses BLUFFS vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that enforces the us...
Microsoft Edge (Chromium-based) Tampering Vulnerability
...
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
...
Event Tracing for Windows Information Disclosure Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
...
Connected User Experiences and Telemetry Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-2157 Use after free in Interest groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...