24590 matches found
Chromium: CVE-2026-17885 Inappropriate implementation in Paint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-13914 Inappropriate implementation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Security Feature Bypass Vulnerability
Files or directories accessible to external parties in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Windows DNS Spoofing Vulnerability
...
GitHub: CVE-2024-29187 WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM
Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Chromium: CVE-2024-0814 Incorrect security UI in Payments
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-5487 Inappropriate implementation in Fullscreen
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft OneNote Spoofing Vulnerability
...
Windows Group Policy Security Feature Bypass Vulnerability
...
GitHub: CVE-2023-29007 Arbitrary configuration injection via `git submodule deinit`
...
Chromium: CVE-2023-3079 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-3079 exists in the wild...
Microsoft Publisher Remote Code Execution Vulnerability
...
Windows NTLM Elevation of Privilege Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Azure Apache Ambari Spoofing Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Microsoft Excel Denial of Service Vulnerability
...
Microsoft Publisher Security Feature Bypass Vulnerability
...
Chromium: CVE-2022-2855 Use after free in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-2478 Use after free in PDF
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1865 Use after free in Bookmarks
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1870 Use after free in App Service
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Denial of Service Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Chromium: CVE-2022-0804 Inappropriate implementation in Full screen mode
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Runtime Remote Code Execution Vulnerability
...
Microsoft PowerShell Spoofing Vulnerability
...
Power BI Report Server Spoofing Vulnerability
A Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exists when Power BI Report Server Template file pbix containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to...
Chromium: CVE-2021-37983 Use after free in Dev Tools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
...
Windows SMB Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30564 Heap buffer overflow in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Bowser.sys Denial of Service Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Microsoft Visual Studio Spoofing Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Intune Management Extension Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
...
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability
...
Microsoft Teams iOS Information Disclosure Vulnerability
...
Windows Trust Verification API Denial of Service Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft Exchange Remote Code Execution Vulnerability
...
Windows Task Scheduler Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. An attacker who successfully exploited this vulnerability could run arbitrary code as an administrator. An attacker could then install programs...