28472 matches found
Windows Hyper-V Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could...
Chromium CVE-2026-87645: Improper state validation in Safebrowsing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87642: Uninitialized resource in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87596: Out of bounds read in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office Remote Code Execution Vulnerability
Integer underflow wrap or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally...
Chromium: CVE-2026-17724 Race in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17761 Insufficient validation of untrusted input in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13914 Inappropriate implementation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...
Visual Studio Code Security Feature Bypass Vulnerability
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
...
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Summary: As of July 10, 2025 Microsoft has completed mitigations to address this vulnerability. See KB5042562: Guidance for blocking rollback of virtualization-based security related updates and the Recommended Actions section of this CVE for guidance on how to protect your systems from this...
Visual Studio Denial of Service Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Windows Nearby Sharing Spoofing Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Windows MSHTML Platform Elevation of Privilege Vulnerability
...
.NET and Visual Studio Elevation of Privilege Vulnerability
...
Windows Partition Management Driver Elevation of Privilege Vulnerability
...
Windows Accounts Picture Elevation of Privilege Vulnerability
...
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Microsoft Office OneNote Remote Code Execution Vulnerability
...
Chromium: CVE-2022-2857 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Arc Jumpstart Information Disclosure Vulnerability
...
AMD: CVE-2022-23825 AMD CPU Branch Type Confusion
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Security Center API Remote Code Execution Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Windows SMB Information Disclosure Vulnerability
...
Windows Remote Assistance Information Disclosure Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Defender Denial of Service Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21199 Use Use after free in Aura
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Python Extension Remote Code Execution Vulnerability
...
Chromium CVE-2021-21125: Insufficient policy enforcement in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Access Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
Remote Desktop Protocol Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows Remote Desktop Protocol RDP fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an unauthenticated attacker connects to the target system using RDP and sends specially crafted requests. This vulnerability is pre-authentication and requires no user interaction...