28400 matches found
Windows Kernel Elevation of Privilege Vulnerability
...
Windows TCP/IP Driver Security Feature Bypass Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
...
Chromium CVE-2021-21139: Inappropriate implementation in iframe sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21120: Use after free in WebSQL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Kerberos Security Feature Bypass Vulnerability
...
Microsoft Outlook Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, t...
Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service
...
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...
Quadratic Behavior in xml.etree.ElementPath Index Predicates
...
Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13998 Incorrect security UI in File Input
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office Remote Code Execution Vulnerability
...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Windows Boot Manager Security Feature Bypass Vulnerability
...
Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
...
Visual Studio Code Spoofing Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21231 Insufficient data validation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PowerPoint Remote Code Execution Vulnerability
...
Windows PKU2U Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21145: Use after free in Fonts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21131: Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation CNG Key Isolation service improperly handles memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit this vulnerability, an attacker would...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Microsoft Exchange Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that Microsoft Exchange Server handles URL redirects. If an impacted user is using Microsoft Exchange Outlook Web Access OWA Light, the vulnerability could allow an attacker to discover sensitive information that should otherwise not be...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Chromium CVE-2026-85052: Out of bounds read in CrashReporting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17720 Insufficient policy enforcement in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Lenovo: CVE-2024-23593 Modify Boot Manager and Escalate Privileges
...
Windows Miracast Wireless Display Remote Code Execution Vulnerability
...
Azure HDInsight Jupyter Notebook Spoofing Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
...
Chromium: CVE-2023-0928 Use after free in SwiftShader
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows iSCSI Service Denial of Service Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Microsoft Endpoint Configuration Manager Spoofing Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Windows CSC Service Information Disclosure Vulnerability
...
Microsoft Exchange Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...