21727 matches found
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Storage Spaces Controller Elevation of Privilege Vulnerability
...
Windows Wireless Networking Spoofing Vulnerability
...
Chromium CVE-2021-21128: Heap buffer overflow in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Print Spooler Spoofing Vulnerability
...
Azure SDK for C Security Feature Bypass Vulnerability
...
Windows Digital Media Receiver Elevation of Privilege Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Microsoft Exchange Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Microsoft Office Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Browser Information Disclosure Vulnerability
An information disclosure vulnerability exists when affected Microsoft scripting engines do not properly handle objects in memory. The vulnerability could allow an attacker to detect specific files on the user's computer. In a web-based attack scenario, an attacker could host a website that is us...
Chromium: CVE-2026-12444 Out of bounds read in Chromoting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Desktop Client Remote Code Execution Vulnerability
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Microsoft SharePoint Elevation of Privilege Vulnerability
...
Microsoft Outlook Elevation of Privilege Vulnerability
...
Microsoft Common Log File System Elevation of Privilege Vulnerability
...
Windows TCP/IP Information Disclosure Vulnerability
...
Chromium: CVE-2023-4357 Insufficient validation of untrusted input in XML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Remote Desktop Security Feature Bypass Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
...
Chromium: CVE-2022-2165 Insufficient data validation in URL formatting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Chromium: CVE-2021-30633 Use after free in Indexed DB API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows TCP/IP Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30541 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30555 Use after free in Sharing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
Chromium: CVE-2021-21217 Uninitialized Use in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21215 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure AD Web Sign-in Security Feature Bypass Vulnerability
...
Microsoft PowerPoint Remote Code Execution Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
...
Windows Mobile Device Management Information Disclosure Vulnerability
...
Chromium CVE-2021-21126: Insufficient policy enforcement in extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
RETRACTED
...
Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
...
OpenSSH for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings. An attacker who successfully exploited this vulnerability could replace the shell with a malicious binary. To exploit this vulnerability, an authenticated...
Microsoft IIS Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
Microsoft Word Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...