24590 matches found
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows Devices Human Interface Elevation of Privilege Vulnerability
...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Scripting Engine Memory Corruption Vulnerability
...
Azure Sphere Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30525 Use after free in TabGroups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21227 Insufficient data validation in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
...
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Chromium CVE-2021-21135: Inappropriate implementation in Performance API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2021-21127: Insufficient policy enforcement in extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
ADFS MFA Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Active Directory Federation Services ADFS improperly handles multi-factor authentication requests. An attacker who successfully exploited this vulnerability could bypass some, but not all, of the authentication factors. To exploit this...
Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on with...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Internet Connection Sharing Service Remote Code Execution Vulnerability
A memory corruption vulnerability exists in the Internet Connection Sharing ICS service when an attacker sends specially crafted packets to the server. An attacker who successfully exploited the vulnerability could run arbitrary code on the server with elevated privileges. To exploit the...
Microsoft splwow64 Elevation of Privilege Vulnerability
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited the vulnerability could elevate privileges on an affected system from low-integrity to medium-integrity. This vulnerability by itself does not allow arbitrary code...
Microsoft Exchange Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs;...
ASP.NET Security Feature Bypass Vulnerability
A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated. An attacker who successfully exploited this vulnerability could try an infinite number of authentication attempts. The update addresses the vulnerability by validating the numbe...
Microsoft Outlook Memory Corruption Vulnerability
A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrativ...
Windows RRAS Service Remote Code Execution Vulnerability
A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could execute code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts...
Chromium: CVE-2026-17958 Inappropriate implementation in Views
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17928 Inappropriate implementation in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17700 Insufficient validation of untrusted input in Actor
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Shortcut Files Security Feature Bypass Vulnerability
Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network...
BitLocker Security Feature Bypass Vulnerability
...
Microsoft SQL Server Elevation of Privilege Vulnerability
...
Windows Mobile Broadband Driver Remote Code Execution Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Windows Compressed Folder Remote Code Execution Vulnerability
...
Azure DevOps Server Elevation of Privilege Vulnerability
...
Windows Mark of the Web Security Feature Bypass Vulnerability
...
Microsoft QUIC Denial of Service Vulnerability
...
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
...
Windows NTLM Security Support Provider Information Disclosure Vulnerability
...
Microsoft Word Security Feature Bypass Vulnerability
...
Windows Group Policy Security Feature Bypass Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Defender for Endpoint Tampering Vulnerability
...
Chromium: CVE-2022-1639 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-0807 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...