28326 matches found
Win32 File Enumeration Remote Code Execution Vulnerability
...
Chromium: CVE-2023-4431: Out of bounds memory access in Fonts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-2136 Integer overflow in Skia
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-2136 exists in the wild...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows File History Remote Code Execution Vulnerability
...
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure Site Recovery Remote Code Execution Vulnerability
...
Windows Network Address Translation (NAT) Denial of Service Vulnerability
...
Windows WLAN AutoConfig Service Denial of Service Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
An information disclosure vulnerability exists in SharePoint Server. An attacker who exploited this vulnerability could read arbitrary files on the server. To exploit the vulnerability, an attacker would need to send a specially crafted request to a susceptible SharePoint Server instance. The...
Visual Studio Code Spoofing Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows CD-ROM Driver Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Microsoft Windows Defender Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
Integer underflow wrap or wraparound in Windows Kernel allows an unauthorized attacker to disclose information over an adjacent network...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
BitLocker Security Feature Bypass Vulnerability
...
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious Active...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft SQL Elevation of Privilege Vulnerability
...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Azure Site Recovery Elevation of Privilege Vulnerability
...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Network File System Information Disclosure Vulnerability
...
Windows SMB Denial of Service Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. Windows servers that are configured as DNS...
Azure CycleCloud Elevation of Privilege Vulnerability
...
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
...
Azure SDK for .NET Information Disclosure Vulnerability
...
Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool MSRT improperly handles junctions. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to...
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
Sensitive data storage in improperly locked memory in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...
Hackerone: CVE-2023-38039 HTTP headers eat all memory
...
Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows.Devices.Picker.dll Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Agent Activation Runtime Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Agent Activation Runtime AarSvc fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...
Chromium: CVE-2023-2033 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-2033 exists in the wild...