28424 matches found
Microsoft Office Security Feature Bypass Vulnerability
...
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
...
Skype for Business Remote Code Execution Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
.NET and Visual Studio Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Publisher Remote Code Execution Vulnerability
...
Chromium: CVE-2023-1816 Incorrect security UI in Picture In Picture
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Apache Ambari Spoofing Vulnerability
...
GitHub: CVE-2023-22743 Git for Windows Installer Elevation of Privilege Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
...
Chromium: CVE-2023-0699 Use after free in GPU
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office OneNote Remote Code Execution Vulnerability
...
DirectX Graphics Kernel Elevation of Privilege Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Windows NTLM Spoofing Vulnerability
...
Chromium: CVE-2022-3307 Use after free in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Fax Service Remote Code Execution Vulnerability
...
Windows Network Address Translation (NAT) Denial of Service Vulnerability
...
Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows NTFS Information Disclosure Vulnerability
...
Remote Desktop Protocol Client Information Disclosure Vulnerability
...
Chromium: CVE-2022-1313 Use after free in tab groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Power BI Report Server Spoofing Vulnerability
A Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF vulnerability exists when Power BI Report Server Template file pbix containing HTML files is uploaded to the server and HTML files are accessed directly by the victim. Combining these 2 vulnerabilities together, an attacker is able to...
NTFS Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-37983 Use after free in Dev Tools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-37982 Use after free in Incognito
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows SMB Information Disclosure Vulnerability
...
Microsoft Visual Studio Spoofing Vulnerability
...
Bowser.sys Denial of Service Vulnerability
...
Chromium: CVE-2021-30547 Out of bounds write in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2021-21210 Inappropriate implementation in Network
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21208 Insufficient data validation in QR scanner
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Visual Studio Code Remote Code Execution Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Chromium CVE-2021-21166: Object lifecycle issue in audio
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This CVE has been reported to be exploited in the wild...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Outlook Information Disclosure Vulnerability
...
Windows Print Spooler Remote Code Execution Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs...
Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system,...
Windows Token Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows fails to properly handle token relationships. An attacker who successfully exploited the vulnerability could allow an application with a certain integrity level to execute code at a different integrity level, leading to a sandbox escape...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...