21711 matches found
Microsoft Office Remote Code Execution Vulnerability
...
Windows NTLM Elevation of Privilege Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Chromium: CVE-2023-1810 Heap buffer overflow in Visuals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-1532 Out of bounds read in GPU Video
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Apache Ambari Spoofing Vulnerability
...
Chromium: CVE-2023-0933 Integer overflow in PDF
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
...
Windows DHCP Client Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3200 Heap buffer overflow in Internals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-3195 Out of bounds write in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
Chromium: CVE-2022-1859 Use after free in Performance Manager
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1314 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Win32 Stream Enumeration Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0604 Heap buffer overflow in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PowerShell Spoofing Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Windows Installer Information Disclosure Vulnerability
...
Microsoft Office Spoofing Vulnerability
...
.NET Core and Visual Studio Information Disclosure Vulnerability
...
Windows Address Book Remote Code Execution Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21203 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows SMB Information Disclosure Vulnerability
...
Microsoft Office ClickToRun Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
...
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
...
Windows Port Class Library Elevation of Privilege Vulnerability
...
Microsoft Graphics Components Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafte...
Windows Certificate Dialog Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server TFS improperly handle user input. An attacker who successfully exploited the vulnerability could execute code on the target server in the context of the DevOps or TFS service account. To exploit the...
Windows DHCP Server Remote Code Execution Vulnerability
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, a remote unauthenticated attacker could send a...
Vulnerability in TPM could allow Security Feature Bypass
Executive Summary This advisory addresses CVE-2017-15361, also referred to as "Return of Coppersmith's Attack" ROCA. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. It is important to note that this is a firmware...
Windows TDX Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when tdx.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to elevate the attacker's privilege level. An attacker w...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Visual Studio Code Security Feature Bypass Vulnerability
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling
...
NTFS Elevation of Privilege Vulnerability
...
Visual Studio Denial of Service Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Remote Desktop Client Remote Code Execution Vulnerability
...
BitLocker Security Feature Bypass Vulnerability
...