Xbox Gaming Services Elevation of Privilege Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-4350 Inappropriate implementation in Fullscreen

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

Windows Secure Channel Denial of Service Vulnerability

...

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

...

Chromium: CVE-2023-1230 Inappropriate implementation in WebApp Installs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-1228 Insufficient policy enforcement in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-1216 Use after free in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Exchange Server Remote Code Execution Vulnerability

...

Chromium:CVE-2023-0140: Inappropriate implementation in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

...

Microsoft Office Visio Remote Code Execution Vulnerability

...

Windows Terminal Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability

...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-3058 Use after free in Sign-In Flow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Azure Arc Jumpstart Information Disclosure Vulnerability

...

AMD: CVE-2022-23825 AMD CPU Branch Type Confusion

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-2008 Out of bounds memory access in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1874 Insufficient policy enforcement in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Local Security Authority Subsystem Service (LSASS) Remote Code Execution Vulnerability

...

Windows Kernel Information Disclosure Vulnerability

...

Chromium: CVE-2022-1128 Inappropriate implementation in Web Share API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Power BI Report Server Spoofing Vulnerability

A Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exists when Power BI Report Server Template file pbix containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to...

Chromium: CVE-2021-38001 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Azure CycleCloud Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-30564 Heap buffer overflow in WebXR

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Visual Studio Spoofing Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

...

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-30524 Use after free in TabStrip

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Visual Studio Remote Code Execution Vulnerability

...

Windows Hyper-V Remote Code Execution Vulnerability

...

Windows Container Execution Agent Elevation of Privilege Vulnerability

...

Microsoft Visio Security Feature Bypass Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Microsoft Windows Security Feature Bypass Vulnerability

...

Microsoft Exchange Remote Code Execution Vulnerability

...

Microsoft Access Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...

VBScript Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could gain the same rights as any other user of the Exchange server. This could allow the attacker to perform activities such as accessing the mailboxes of other...