Chromium: CVE-2021-21216 Inappropriate implementation in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

.NET Core Remote Code Execution Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Windows Codecs Library Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or...

Windows Remote Desktop Gateway (RD Gateway) Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows Remote Desktop Gateway RD Gateway when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction. An attacker who...

Windows NTFS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attack...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Chromium: CVE-2026-13023 Uninitialized Use in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-12457 Insufficient data validation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Windows Mobile Broadband Driver Remote Code Execution Vulnerability

...

Windows DNS Information Disclosure Vulnerability

...

3D Builder Remote Code Execution Vulnerability

...

Windows MSHTML Platform Security Feature Bypass Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Memory Integrity System Readiness Scan Tool Defense in Depth Update

The Memory Integrity System Readiness Scan Tool hvciscanamd64.exe and hvciscanarm64.exe is used to check for compatibility issues with memory integrity, also known as hypervisor-protected code integrity HVCI. The original version was published without a RSRC section, which contains resource...

Chromium: CVE-2023-2137 Heap buffer overflow in sqlite

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Lock Screen Security Feature Bypass Vulnerability

...

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

Windows Cryptographic Services Remote Code Execution Vulnerability

...

GitHub: CVE-2023-22490 mingit Information Disclosure Vulnerability

...

Windows Graphics Component Information Disclosure Vulnerability

...

Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability

...

Chromium: CVE-2022-0800 Heap buffer overflow in Cast UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

DirectX Graphics Kernel Remote Code Execution Vulnerability

...

Chromium: CVE-2021-37984 Heap buffer overflow in PDFium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

Microsoft Office Online Server Spoofing Vulnerability

...

Chromium: CVE-2021-21204 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21129: Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21121: Use after free in Omnibox

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21122: Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

Windows iSCSI Target Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service BITS improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, a...

Microsoft SharePoint Reflective XSS Vulnerability

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Chromium: CVE-2026-13995 Insufficient validation of untrusted input in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-13024 Insufficient validation of untrusted input in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-12463 Inappropriate implementation in Views

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Telephony Service Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

Microsoft Word Remote Code Execution Vulnerability

...

Azure Apache Ambari Spoofing Vulnerability

...

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

...

Windows Enroll Engine Security Feature Bypass Vulnerability

...

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

Microsoft Outlook Denial of Service Vulnerability

...

Chromium: CVE-2022-2481 Use after free in Views

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...