23139 matches found
Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability
...
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-1859 Use after free in Performance Manager
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1314 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
VP9 Video Extensions Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0795 Type Confusion in Blink Layout
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PowerShell Spoofing Vulnerability
...
Chromium: CVE-2021-4098 Insufficient data validation in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
...
Windows Fast FAT File System Driver Elevation of Privilege Vulnerability
...
SCOM Information Disclosure Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Microsoft Office Spoofing Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows Address Book Remote Code Execution Vulnerability
...
Windows AF_UNIX Socket Provider Denial of Service Vulnerability
...
Chromium: CVE-2021-30507 Inappropriate implementation in Offline
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-21232 Use after free in Dev Tools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows SMB Information Disclosure Vulnerability
...
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
...
Windows Network File System Denial of Service Vulnerability
...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
MSHTML Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input. An attacker could execute arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an attacker who successfully exploited the...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
Microsoft Word Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. The file could th...
Windows DHCP Server Remote Code Execution Vulnerability
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, a remote unauthenticated attacker could send a...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. To exploit the vulnerability, an attacker would need to execute a man-in-the-middle attack to...
Microsoft Visual Studio Information Disclosure Vulnerability
An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database PDB files. An attacker who took advantage of this information disclosure could view uninitialized memory from the Visual Studio instance...
Vulnerability in TPM could allow Security Feature Bypass
Executive Summary This advisory addresses CVE-2017-15361, also referred to as "Return of Coppersmith's Attack" ROCA. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. It is important to note that this is a firmware...
Microsoft Browser Information Disclosure Vulnerability
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack...
Windows Media Center Remote Code Execution Vulnerability
A vulnerability exists in Windows Media Center that could allow remote code execution if Windows Media Center opens a specially crafted Media Center link .mcl file that references malicious code. An attacker who successfully exploited this vulnerability could take control of an affected system...
Microsoft 365 Copilot for Android Spoofing Vulnerability
Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally...
Active Directory Domain Services Elevation of Privilege Vulnerability
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...
RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling
...
Microsoft Excel Remote Code Execution Vulnerability
...
NTFS Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Microsoft Windows Defender Elevation of Privilege Vulnerability
...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft OneNote Spoofing Vulnerability
...
Chromium: CVE-2023-3422 Use after free in Guest View
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET and Visual Studio Elevation of Privilege Vulnerability
...
Microsoft Outlook Remote Code Execution Vulnerability
...
Chromium: CVE-2023-1532 Out of bounds read in GPU Video
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...