24507 matches found
Chromium: CVE-2023-2136 Integer overflow in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-2136 exists in the wild...
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows File History Remote Code Execution Vulnerability
...
Win32 File Enumeration Remote Code Execution Vulnerability
...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
...
Windows Network Address Translation (NAT) Denial of Service Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows WLAN AutoConfig Service Denial of Service Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Azure Site Recovery Remote Code Execution Vulnerability
...
Visual Studio Code Spoofing Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
An information disclosure vulnerability exists in SharePoint Server. An attacker who exploited this vulnerability could read arbitrary files on the server. To exploit the vulnerability, an attacker would need to send a specially crafted request to a susceptible SharePoint Server instance. The...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Windows Defender Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
BitLocker Security Feature Bypass Vulnerability
...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft SQL Elevation of Privilege Vulnerability
...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
...
Windows Network File System Information Disclosure Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows SMB Denial of Service Vulnerability
...
Azure SDK for .NET Information Disclosure Vulnerability
...
Azure CycleCloud Elevation of Privilege Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. Windows servers that are configured as DNS...
Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool MSRT improperly handles junctions. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to...
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows.Devices.Picker.dll Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
AMD: CVE-2022-23824 IBPB and Return Address Predictor Interactions
...
Windows Encrypting File System (EFS) Remote Code Execution Vulnerability
...
Windows Agent Activation Runtime Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Agent Activation Runtime AarSvc fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...