21701 matches found
Azure Arc Jumpstart Information Disclosure Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-2161 Use after free in WebApp Provider
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1874 Insufficient policy enforcement in Safe Browsing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1857 Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows DNS Server Remote Code Execution Vulnerability
...
Chromium: CVE-2022-1128 Inappropriate implementation in Web Share API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Site Recovery Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0795 Type Confusion in Blink Layout
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-0789 Heap buffer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows User Account Profile Picture Denial of Service Vulnerability
...
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-37982 Use after free in Incognito
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30564 Heap buffer overflow in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
Microsoft Visual Studio Spoofing Vulnerability
...
Microsoft Defender Denial of Service Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30507 Inappropriate implementation in Offline
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21197 Heap buffer overflow in TabStrip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Camera Codec Pack Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Microsoft SharePoint Information Disclosure Vulnerability
...
Windows Network File System Denial of Service Vulnerability
...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Active Directory Information Disclosure Vulnerability
An information disclosure vulnerability exists when Active Directory integrated DNS ADIDNS mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system. To exploit this condition, an...
Microsoft Edge Memory Corruption Vulnerability
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...
Windows Kernel Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as a Domain Administrator. Exploitation of this vulnerability requires Exchange Web Services EWS and Push Notifications to be enabled a...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as any other user of the Exchange server. This could allow the attacker to perform activities such as accessing the mailboxes of other...
Microsoft SharePoint Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Active Directory Domain Services Elevation of Privilege Vulnerability
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...
Microsoft Simple Certificate Enrollment Protocol Denial of Service Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Xbox Gaming Services Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Authentication Elevation of Privilege Vulnerability
...
Windows SMB Witness Service Security Feature Bypass Vulnerability
...
Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...