28326 matches found
Windows NT OS Kernel Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
Windows Wireless Networking Information Disclosure Vulnerability
...
Chromium: CVE-2021-21223 Integer overflow in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21151 Use after free in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
System Center Operations Manager Elevation of Privilege Vulnerability
...
Azure Local Elevation of Privilege Vulnerability
Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
Microsoft Bluetooth Driver Spoofing Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
Microsoft Defender Elevation of Privilege Vulnerability
...
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability
...
Chromium: CVE-2022-4135 Heap buffer overflow in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2022-4135 exists in the wild...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-1310 Use after free in regular expressions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Windows Denial of Service Vulnerability
Microsoft is aware of a denial of service vulnerability named "FragmentSmack" CVE-2018-5391 affecting Windows systems. An attacker could send many 8-byte sized IP fragments with random starting offsets, but withhold the last fragment and exploit the worst-case complexity of linked lists in...
ASP.NET Core Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when a Kestrel web application fails to validate web requests. An attacker who successfully exploited this vulnerability could perform HTML injection attacks. To exploit the vulnerability, an attacker could send a specially crafted request, containin...
Chromium: CVE-2026-79208 Missing authorization in HTTP2
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-5481 Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Outlook for Android Elevation of Privilege Vulnerability
...
Windows HTTP.sys Elevation of Privilege Vulnerability
...
OpenSSL: CVE-2022-3602 X.509 certificate verification buffer overrun
...
Windows Partition Management Driver Elevation of Privilege Vulnerability
...
Microsoft Office app Remote Code Execution Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21218 Uninitialized Use in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21142: Use after free in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft OneDrive Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerabilit...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data;...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...
Vim: Use-after-free in JSON Decoding
...
Chromium: CVE-2026-13987 Incorrect security UI in Mobile
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-14075 Policy bypass in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...