23108 matches found
Skype for Business and Lync Spoofing Vulnerability
A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The attacker who successfully exploited...
Windows GDI Information Disclosure Vulnerability
A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker...
Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-2783 Incorrect handle provided in unspecified circumstances in Mojo on Windows
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2025-2476 Use after free in Lens
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2024-0518 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Remote Code Execution Vulnerability
...
Windows HTML Platforms Security Feature Bypass Vulnerability
...
Windows Partition Management Driver Elevation of Privilege Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Chromium: CVE-2022-3890 Heap buffer overflow in Crashpad
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
OpenSSL: CVE-2022-3786 X.509 certificate verification buffer overrun
...
Chromium: CVE-2022-3653 Heap buffer overflow in Vulkan
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Graphics Component Information Disclosure Vulnerability
...
Chromium: CVE-2022-2011 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1637 Inappropriate implementation in Web Contents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows NTFS Information Disclosure Vulnerability
...
Remote Desktop Protocol Client Information Disclosure Vulnerability
...
Chromium: CVE-2022-1313 Use after free in tab groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-0980 Use after free in New Tab Page
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-0792 Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-0608 Integer overflow in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Defender Remote Code Execution Vulnerability
...
Open Management Infrastructure Elevation of Privilege Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows Redirected Drive Buffering SubSystem Driver Information Disclosure Vulnerability
...
Chromium: CVE-2021-30533 Insufficient policy enforcement in PopupBlocker
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Skype for Business and Lync Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21208 Insufficient data validation in QR scanner
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21201 Use after free in permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows 10 Update Assistant Elevation of Privilege Vulnerability
...
Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability
...
Microsoft PowerPoint Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Backup Engine Elevation of Privilege Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Windows Print Spooler Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs...
Microsoft Exchange Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...
Windows Uniscribe Remote Code Execution Vulnerability
A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accoun...
Chromium: CVE-2026-1504 Inappropriate implementation in Background Fetch API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows DNS Spoofing Vulnerability
...
Windows Remote Desktop Licensing Service Spoofing Vulnerability
...
Azure CLI REST Command Information Disclosure Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Chromium: CVE-2023-5487 Inappropriate implementation in Fullscreen
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...