24507 matches found
Windows User Profile Service Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21217 Uninitialized Use in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21215 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Win32k Elevation of Privilege Vulnerability
...
Windows Mobile Device Management Information Disclosure Vulnerability
...
Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
Microsoft Exchange Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Chromium: CVE-2026-13973 Inappropriate implementation in UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2024-5274 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2024-5274 exists in the wild...
Windows TCP/IP Information Disclosure Vulnerability
...
Windows Themes Information Disclosure Vulnerability
...
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
...
Microsoft Excel Spoofing Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
...
Chromium: CVE-2022-2477 Use after free in Guest View
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-2165 Insufficient data validation in URL formatting
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2022-0971 Use after free in Blink Layout
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-0805 Use after free in Browser Switcher
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-37985 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows AppContainer Firewall Rules Security Feature Bypass Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows 10 Update Assistant Elevation of Privilege Vulnerability
...
Windows TCP/IP Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30555 Use after free in Sharing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Wireless Networking Spoofing Vulnerability
...
Windows Print Spooler Spoofing Vulnerability
...
Windows Digital Media Receiver Elevation of Privilege Vulnerability
...
Chakra Scripting Engine Memory Corruption Vulnerability
...
RETRACTED
...
Windows Error Reporting Information Disclosure Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
SharePoint Open Redirect Vulnerability
An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing. To exploit the vulnerability, an attacker could send a link that has a specially crafted URL and convince the user to click the link. When an authenticated SharePoint user clicks the link, the authenticated...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Microsoft IIS Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft IIS Server fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited this vulnerability can allow an unprivileged function ran by the user to execute code in the context of NT...
Visual Studio Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions. An attacker who successfully exploited this vulnerability overwrite arbitrary files with XML content in the security context of the local system. To exploit this vulnerabilit...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...