23108 matches found
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Devices Human Interface Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30593 Out of bounds read in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
OLE Automation Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21199 Use Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Chromium CVE-2021-21125: Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Remote Code Execution Vulnerability
...
ADFS MFA Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Active Directory Federation Services ADFS improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors. To exploit this...
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...
Adobe Font Manager Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. For all systems except Windows 10, an attacker who successfully exploited the vulnerability coul...
Windows GDI Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory, allowing an attacker to retrieve information from a targeted system. By itself, the information disclosure does not allow arbitrary code execution; however, it could...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Comctl32 Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability coul...
WPAD Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Windows when the Web Proxy Auto Discovery WPAD protocol falls back to a vulnerable proxy discovery process. An attacker who successfully exploited this vulnerability could bypass security and gain elevated privileges on a targeted system...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Chromium: CVE-2024-11116 Inappropriate implementation in Paint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SQL Server Elevation of Privilege Vulnerability
...
Microsoft Outlook Remote Code Execution Vulnerability
...
Remote Desktop Client Remote Code Execution Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Microsoft Word Security Feature Bypass Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Windows Accounts Picture Elevation of Privilege Vulnerability
...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
.NET Framework Denial of Service Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
Windows Error Reporting Elevation of Privilege Vulnerability
...
Windows NTLM Spoofing Vulnerability
...
System Center Operations Manager: Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
...
Windows Security Center API Remote Code Execution Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows Event Tracing Remote Code Execution Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows Event Tracing Elevation of Privilege Vulnerability
...
Azure Sphere Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21227 Insufficient data validation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...