24590 matches found
Windows Event Tracing Remote Code Execution Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Skype for Business and Lync Remote Code Execution Vulnerability
...
Chromium CVE-2021-21125: Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Remote Code Execution Vulnerability
...
Microsoft SharePoint Information Disclosure Vulnerability
...
Microsoft Windows Codecs Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted ima...
Adobe Font Manager Library Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format. For all systems except Windows 10, an attacker who successfully exploited the vulnerability coul...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Git for Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts wit...
Windows GDI Information Disclosure Vulnerability
A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker...
WPAD Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Windows when the Web Proxy Auto Discovery WPAD protocol falls back to a vulnerable proxy discovery process. An attacker who successfully exploited this vulnerability could bypass security and gain elevated privileges on a targeted system...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Chromium: CVE-2026-17763 Inappropriate implementation in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Visual Studio Code CoPilot Chat Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
Windows Deployment Services Remote Code Execution Vulnerability
...
Microsoft PLUGScheduler Scheduled Task Elevation of Privilege Vulnerability
...
Chromium: CVE-2024-0518 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Windows Accounts Picture Elevation of Privilege Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Windows Error Reporting Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows Digital Media Receiver Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-0610 Inappropriate implementation in Gamepad API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows WalletService Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21210 Inappropriate implementation in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21199 Use Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows 10 Update Assistant Elevation of Privilege Vulnerability
...
Windows Projected File System FS Filter Driver Information Disclosure Vulnerability
...
Microsoft PowerPoint Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
NetBT Information Disclosure Vulnerability
An information disclosure vulnerability exists when NetBIOS over TCP NBT Extensions NetBT improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker wou...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted...
Windows Graphics Component Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...