Microsoft Excel Information Disclosure Vulnerability

...

Microsoft Color Management Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data;...

Windows Update Delivery Optimization Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Update Delivery Optimization does not properly enforce file share permissions. An attacker who successfully exploited the vulnerability could overwrite files that require higher privileges than what the attacker already has. To explo...

Windows Graphics Component Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...

Chromium: CVE-2026-79110 Missing authorization in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17934 Insufficient validation of untrusted input in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-15131 Insufficient data validation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Secure Kernel Mode Elevation of Privilege Vulnerability

...

Microsoft SharePoint Elevation of Privilege Vulnerability

...

Dynamics 365 Sales Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Microsoft Exchange Server Remote Code Execution Vulnerability

...

.NET Framework Denial of Service Vulnerability

...

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

...

SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

...

Chromium: CVE-2022-2852 Use after free in FedCM

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

.NET Framework Denial of Service Vulnerability

...

DiskUsage.exe Remote Code Execution Vulnerability

...

Azure Site Recovery Elevation of Privilege Vulnerability

...

Active Directory Domain Services Elevation of Privilege Vulnerability

...

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

...

Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability

...

Chromium CVE-2021-21132: Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Chromium: CVE-2026-79141 Incorrect authorization in Browser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79267 Race condition in Workers

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17870 Insufficient validation of untrusted input in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13902 Inappropriate implementation in Chrome for iOS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13034 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Visual Studio Collector Service Denial of Service Vulnerability

...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Microsoft Common Data Model SDK Denial of Service Vulnerability

...

3D Builder Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

Chromium:CVE-2023-0129: Heap buffer overflow in Network Service

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3D Builder Remote Code Execution Vulnerability

...

Microsoft Exchange Server Elevation of Privilege Vulnerability

...

Active Directory Domain Services Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-37985 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Kernel Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-30597 Use after free in Browser UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

RETRACTED

...

Microsoft Exchange Remote Code Execution Vulnerability

...

Azure SDK for C Security Feature Bypass Vulnerability

...

Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability

...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevat...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

Microsoft Guidance on Scripting Engine Memory Corruption Vulnerability

Important Microsoft has completed the investigation into a public report of this vulnerability. We have issued CVE-2020-0674 - Scripting Engine Memory Corruption Vulnerability to address this vulnerability. For more information about this issue, including download links for an available security...