28423 matches found
Chromium: CVE-2026-78961 Incorrect authorization in Core
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-78946 Incorrect authorization in Select
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12456 Insufficient validation of untrusted input in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Elevation of Privilege Vulnerability
Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally...
Visual Studio Tools for Applications and SQL Server Management Studio Elevation of Privilege Vulnerability
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
Windows Mark of the Web Security Feature Bypass Vulnerability
...
OpenSSL: CVE-2022-3786 X.509 certificate verification buffer overrun
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
.NET Core and Visual Studio Information Disclosure Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows WalletService Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that fdSSDP.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted...
Git for Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts wit...
Comctl32 Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability coul...
Microsoft Visual Studio Information Disclosure Vulnerability
An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database PDB files. An attacker who took advantage of this information disclosure could view uninitialized memory from the Visual Studio instance...
Windows RRAS Service Remote Code Execution Vulnerability
A remote code execution vulnerability exists in RPC if the server has Routing and Remote Access enabled. An attacker who successfully exploited this vulnerability could execute code on the target system. An attacker could then install programs; view, change, or delete data; or create new accounts...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Chromium CVE-2026-87645: Improper state validation in Safebrowsing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87622: Missing authorization in FedCM
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87596: Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Entra ID Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network...
Chromium: CVE-2026-17724 Race in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17761 Insufficient validation of untrusted input in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13914 Inappropriate implementation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...
Windows Remote Desktop Licensing Service Spoofing Vulnerability
...
Windows Deployment Services Remote Code Execution Vulnerability
...
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Summary: As of July 10, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows MSHTML Platform Elevation of Privilege Vulnerability
...
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
...
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Error Reporting Elevation of Privilege Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Chromium: CVE-2022-2857 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...