23109 matches found
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
...
Chromium: CVE-2023-3079 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-3079 exists in the wild...
Secure Boot Security Feature Bypass Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Microsoft Excel Denial of Service Vulnerability
...
Chromium: CVE-2023-1229 Inappropriate implementation in Permission prompts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Windows Credential Manager User Interface Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-1480 Use after free in Device API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows Runtime Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0306 Heap buffer overflow in PDFium
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Secure Boot Security Feature Bypass Vulnerability
...
Microsoft Edge (Chrome based) Spoofing on IE Mode
...
Microsoft Word Remote Code Execution Vulnerability
...
3D Viewer Remote Code Execution Vulnerability
...
Chromium: CVE-2021-37983 Use after free in Dev Tools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
...
Windows User Profile Service Elevation of Privilege Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Microsoft Intune Management Extension Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21221 Insufficient validation of untrusted input in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
...
Internet Explorer Remote Code Execution Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Chromium CVE-2021-21137: Inappropriate implementation in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows NTFS Remote Code Execution Vulnerability
...
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Windows Graphics Component Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...
Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service BITS IIS module improperly handles uploaded content. An attacker who successfully exploited this vulnerability could upload restricted file types to an IIS-hosted folder. To exploit this...
Windows Token Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape...
Remote Desktop Protocol Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Remote Desktop Protocol RDP fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...
.NET Framework and Visual Studio Spoofing Vulnerability
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's. An attacker who successfully exploited this vulnerability could use it to bypass security logic intended to ensure that a user-provided URL belonged to a specific hostname or a subdomain of that...
Microsoft OneNote Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Microsoft OneNote improperly validates input before loading dynamic link library DLL files. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, ...
Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2024-12695 Out of bounds write in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Netlogon Elevation of Privilege Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Chromium: CVE-2024-0814 Incorrect security UI in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-5217 exists in the wild...
Windows Group Policy Security Feature Bypass Vulnerability
...
Windows MSHTML Platform Elevation of Privilege Vulnerability
...
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
...