23139 matches found
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Office ClickToRun Remote Code Execution Vulnerability
...
Windows Camera Codec Pack Remote Code Execution Vulnerability
...
Microsoft SharePoint Information Disclosure Vulnerability
...
Windows Error Reporting Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files. The vulnerability could allow elevation of privilege if an attacker can successfully exploit it. An attacker who successfully exploited the vulnerability could gain greater access to...
Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...
Active Directory Information Disclosure Vulnerability
An information disclosure vulnerability exists when Active Directory integrated DNS ADIDNS mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system. To exploit this condition, an...
Microsoft Edge Memory Corruption Vulnerability
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...
ADFS Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Active Directory Federation Services ADFS improperly updates its list of banned IP addresses. To exploit this vulnerability, an attacker would have to convince a victim ADFS administrator to update the list of banned IP addresses. This security...
Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server TFS improperly handle user input. An attacker who successfully exploited the vulnerability could execute code on the target server in the context of the DevOps or TFS service account. To exploit the...
ADFS Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Active Directory Federation Services ADFS improperly handles multi-factor authentication requests. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this...
Microsoft SharePoint Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Microsoft SharePoint Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Chromium: CVE-2023-5484 Inappropriate implementation in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
...
Windows SMB Witness Service Security Feature Bypass Vulnerability
...
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Chromium: CVE-2023-1810 Heap buffer overflow in Visuals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Microsoft OneNote Elevation of Privilege Vulnerability
...
Windows Netlogon Denial of Service Vulnerability
...
CVE-2022-3775
...
Chromium: CVE-2022-3200 Heap buffer overflow in Internals
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
VP9 Video Extensions Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0795 Type Confusion in Blink Layout
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-4098 Insufficient data validation in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
SCOM Information Disclosure Vulnerability
...
Windows AF_UNIX Socket Provider Denial of Service Vulnerability
...
Windows Address Book Remote Code Execution Vulnerability
...
Windows Kernel Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30507 Inappropriate implementation in Offline
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21232 Use after free in Dev Tools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows SMB Information Disclosure Vulnerability
...