23108 matches found
Win32k Elevation of Privilege Vulnerability
...
Microsoft Office app Remote Code Execution Vulnerability
...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists because of overly permissive Access Control Lists ACLs on multiple system files, including the Security Accounts Manager SAM database. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Microsoft Windows Folder Redirection Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...
Package Managers Configurations Remote Code Execution Vulnerability
Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code execution. We believe...
Chromium CVE-2021-21147: Inappropriate implementation in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Remote Code Execution Vulnerability
...
Microsoft OneDrive Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...
Encryption Key Negotiation of Bluetooth Vulnerability
Executive Summary Microsoft is aware of the Bluetooth BR/EDR basic rate/enhanced data rate, known as "Bluetooth Classic" key negotiation vulnerability that exists at the hardware specification level of any BR/EDR Bluetooth device. An attacker could potentially be able to negotiate the offered key...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Azure Local Elevation of Privilege Vulnerability
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...
Mitre: CVE-2023-24023 Bluetooth Vulnerability
Microsoft is aware of the Bluetooth Forward and Future Secrecy Attacks and Defenses BLUFFS vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that enforces the us...
Windows Graphics Component Elevation of Privilege Vulnerability
...
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Event Tracing for Windows Information Disclosure Vulnerability
...
Chromium: CVE-2022-4135 Heap buffer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2022-4135 exists in the wild...
Windows HTTP.sys Elevation of Privilege Vulnerability
...
Windows Wireless Networking Information Disclosure Vulnerability
...
Windows SSDP Service Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21123: Insufficient data validation in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability
...
Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
...
Chromium: CVE-2022-2157 Use after free in Interest groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1134 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft SQL Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execute code in the context of the SQL Server Database Engine service account. To exploit the...
Windows SAM and LSAD Downgrade Vulnerability
An elevation of privilege vulnerability exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD remote protocols when they accept authentication levels that do not protect them adequately. The vulnerability is caused by the way the SAM and LSAD remote protocols...
Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
...
Degradation of resolution service when 'discard-timeout' and 'serve-expired-client-timeout' are combined in unusual configuration
...
'max-global-quota' reset by DNSSEC validation restarts
...
Active Directory Certificate Services Elevation of Privilege Vulnerability
Improper authorization in Active Directory Certificate Services AD CS allows an authorized attacker to elevate privileges over a network...
.NET and Visual Studio Denial of Service Vulnerability
...
Chromium: CVE-2023-5475 Inappropriate implementation in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-0941 Use after free in Prompts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-0941 exists in the wild...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Windows Cryptographic Information Disclosure Vulnerability
...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Web Account Manager Information Disclosure Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0809 Out of bounds memory access in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...