23108 matches found
Chromium CVE-2021-21120: Use after free in WebSQL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21139: Inappropriate implementation in iframe sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Kerberos Security Feature Bypass Vulnerability
...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Microsoft SharePoint Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Microsoft IIS Server Tampering Vulnerability
A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers. An attacker who successfully exploited the vulnerability could cause a vulnerable server to improperly process HTTP headers and tamper with the responses returned to clients. To exploit the...
Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
...
Possible heap buffer overflow when validator canonicalizes RDATA that contains domain name
...
Memory corruption could lead to crash and denial of service
...
Privacy/configuration issue when adding local data in views through 'unbound-control'
...
Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward zone by a legitimate parent's NXDOMAIN
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
...
Outlook for Android Information Disclosure Vulnerability
...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
...
Microsoft Defender Elevation of Privilege Vulnerability
...
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows iSCSI Service Denial of Service Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Upcoming improvements to Azure Data Factory and Azure Synapse Pipeline infrastructure in response to CVE-2022-29972
Executive Summary Microsoft recently mitigated and remediated a vulnerability affecting Azure Data Factory and Azure Synapse Pipelines. The vulnerability was found in the third-party ODBC data connector used to connect to Amazon Redshift, in Integration Runtime IR in Azure Synapse Pipelines, and...
Paint 3D Remote Code Execution Vulnerability
...
Kerberos AppContainer Security Feature Bypass Vulnerability
...
Windows TCP/IP Driver Security Feature Bypass Vulnerability
...
Chromium: CVE-2021-21218 Uninitialized Use in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET Core Remote Code Execution Vulnerability
...
Chromium CVE-2021-21144: Heap buffer overflow in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21131: Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. Exploitation of the vulnerability requires that a...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
ASP.NET Core Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when a Kestrel web application fails to validate web requests. An attacker who successfully exploited this vulnerability could perform HTML injection attacks. To exploit the vulnerability, an attacker could send a specially crafted request, containin...
Possible heap use-after-free in an error path when a DoT forwarded query is jostled out
...
Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC environments
...
'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to a crash
...
Libunbound applications configured with 'unwanted-reply-threshold' could eventually be abruptly terminated
...
Chromium: CVE-2026-12032 Inappropriate implementation Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows Bluetooth Service Remote Code Execution Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Outlook for Android Elevation of Privilege Vulnerability
...
PowerShell Remote Code Execution Vulnerability
...