23108 matches found
Chromium: CVE-2022-2157 Use after free in Interest groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1134 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21218 Uninitialized Use in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Microsoft SQL Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions. An attacker who successfully exploited this vulnerability could execute code in the context of the SQL Server Database Engine service account. To exploit the...
Windows SAM and LSAD Downgrade Vulnerability
An elevation of privilege vulnerability exists in the Security Account Manager SAM and Local Security Authority Domain Policy LSAD remote protocols when they accept authentication levels that do not protect them adequately. The vulnerability is caused by the way the SAM and LSAD remote protocols...
Degradation of resolution service from improperly accounted client-terminated DNS-over-QUIC queries
...
DNS Cookie bypass when combined with proxy-protocol use
...
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-5475 Inappropriate implementation in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Web Account Manager Information Disclosure Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0809 Out of bounds memory access in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Kerberos AppContainer Security Feature Bypass Vulnerability
...
.NET Core Remote Code Execution Vulnerability
...
Chromium CVE-2021-21120: Use after free in WebSQL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21139: Inappropriate implementation in iframe sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Kerberos Security Feature Bypass Vulnerability
...
Microsoft SharePoint Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...
Microsoft IIS Server Tampering Vulnerability
A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers. An attacker who successfully exploited the vulnerability could cause a vulnerable server to improperly process HTTP headers and tamper with the responses returned to clients. To exploit the...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Visual Studio Code Remote Extension Elevation of Privilege Vulnerability
...
Outlook for Android Information Disclosure Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Defender Elevation of Privilege Vulnerability
...
Microsoft OneDrive for iOS Security Feature Bypass Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows iSCSI Service Denial of Service Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
PowerShell Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Upcoming improvements to Azure Data Factory and Azure Synapse Pipeline infrastructure in response to CVE-2022-29972
Executive Summary Microsoft recently mitigated and remediated a vulnerability affecting Azure Data Factory and Azure Synapse Pipelines. The vulnerability was found in the third-party ODBC data connector used to connect to Amazon Redshift, in Integration Runtime IR in Azure Synapse Pipelines, and...
Windows TCP/IP Driver Security Feature Bypass Vulnerability
...
Paint 3D Remote Code Execution Vulnerability
...
Chromium CVE-2021-21144: Heap buffer overflow in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21131: Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. Exploitation of the vulnerability requires that a...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
ASP.NET Core Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when a Kestrel web application fails to validate web requests. An attacker who successfully exploited this vulnerability could perform HTML injection attacks. To exploit the vulnerability, an attacker could send a specially crafted request, containin...
Chromium: CVE-2026-12032 Inappropriate implementation Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...