Chromium: CVE-2021-21204 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

.NET Core Remote Code Execution Vulnerability

...

Windows Local Spooler Remote Code Execution Vulnerability

...

Chromium CVE-2021-21126: Insufficient policy enforcement in extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Word Security Feature Bypass Vulnerability

...

Internet Explorer Browser Helper Object (BHO) Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object BHO plugin on Internet Explorer handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An...

Microsoft Word Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the...

Chromium: CVE-2026-17733 Inappropriate implementation in QUIC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-12463 Inappropriate implementation in Views

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

.NET and Visual Studio Remote Code Execution Vulnerability

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network...

Windows Telephony Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

Windows Fast FAT File System Driver Remote Code Execution Vulnerability

Integer overflow or wraparound in Windows Fast FAT Driver allows an unauthorized attacker to execute code locally...

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

...

Chromium: CVE-2024-0517 Out of bounds write in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3D Builder Remote Code Execution Vulnerability

...

Windows Lock Screen Security Feature Bypass Vulnerability

...

Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Windows Graphics Component Information Disclosure Vulnerability

...

Windows Graphics Component Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-1855 Use after free in Messaging

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

.NET Framework Denial of Service Vulnerability

...

Chromium: CVE-2021-37984 Heap buffer overflow in PDFium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-37975 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to be exploited in the wild...

Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-21209 Inappropriate implementation in storage

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21129: Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2021-21133: Insufficient policy enforcement in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

DirectX Graphics Kernel Elevation of Privilege Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Windows iSCSI Target Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...

Windows NTFS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. To exploit the vulnerability, an attack...

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

Chromium: CVE-2026-76041 Information leak in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17900 Inappropriate implementation in Enterprise

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Remote Code Execution Vulnerability

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally...

Chromium: CVE-2026-12457 Insufficient data validation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Telephony Service Remote Code Execution Vulnerability

Stack-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...

Win32k Elevation of Privilege Vulnerability

...

Chromium: CVE-2024-4671 Use after free in Visuals

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2024-4671 exists in the wild...

Windows Printing Service Spoofing Vulnerability

...

Windows Cryptographic Services Remote Code Execution Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Azure Apache Oozie Spoofing Vulnerability

...

Memory Integrity System Readiness Scan Tool Defense in Depth Update

The Memory Integrity System Readiness Scan Tool hvciscanamd64.exe and hvciscanarm64.exe is used to check for compatibility issues with memory integrity, also known as hypervisor-protected code integrity HVCI. The original version was published without a RSRC section, which contains resource...

Azure Apache Ambari Spoofing Vulnerability

...

Windows Enroll Engine Security Feature Bypass Vulnerability

...

Chromium: CVE-2023-1528 Use after free in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows DHCP Client Information Disclosure Vulnerability

...

Chromium: CVE-2022-1863 Use after free in Tab Groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...