23108 matches found
Microsoft Office Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials. An attacker who successfully exploited this vulnerability could perform a phishing attack...
Windows Telephony Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an unauthorized attacker to execute code over a network...
Windows SMBv3 Server Remote Code Execution Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Chromium: CVE-2024-4671 Use after free in Visuals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2024-4671 exists in the wild...
Windows Storage Elevation of Privilege Vulnerability
...
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
...
Azure Apache Oozie Spoofing Vulnerability
...
DHCP Server Service Remote Code Execution Vulnerability
...
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3199 Use after free in Frames
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-2010 Out of bounds read in compositing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Digital Media Receiver Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Windows Telephony Server Elevation of Privilege Vulnerability
...
Microsoft Defender for IoT Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-0603 Use after free in File Manager
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Application Model Core API Elevation of Privilege Vulnerability
...
Visual Studio Code WSL Extension Remote Code Execution Vulnerability
...
Azure Active Directory Information Disclosure Vulnerability
An information disclosure vulnerability manifests when a user or an application uploads unprotected private key data as part of an authentication certificate keyCredential on an Azure AD Application or Service Principal which is not recommended. This vulnerability allows a user or service in the...
Windows AD FS Security Feature Bypass Vulnerability
...
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30525 Use after free in TabGroups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21213 Use after free in WebMIDI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Overlay Filter Security Feature Bypass Vulnerability
...
Microsoft splwow64 Elevation of Privilege Vulnerability
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code...
ASP.NET Security Feature Bypass Vulnerability
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated. An attacker who successfully exploited this vulnerability could try an infinite number of authentication attempts. The update addresses the vulnerability by validating the numbe...
Windows RRAS Service Remote Code Execution Vulnerability
A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could execute code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts...
Chromium: CVE-2026-12460 Insufficient policy enforcement in File System Access
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12446 Insufficient data validation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Shortcut Files Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
Microsoft OneNote Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Office OneNote allows an unauthorized attacker to bypass a security feature locally...
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
...
Windows Compressed Folder Remote Code Execution Vulnerability
...
Windows Mark of the Web Security Feature Bypass Vulnerability
...
Microsoft WordPad Information Disclosure Vulnerability
...
Microsoft QUIC Denial of Service Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows Group Policy Security Feature Bypass Vulnerability
...
Office for Android Spoofing Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...