28424 matches found
.NET Framework and Visual Studio Spoofing Vulnerability
A vulnerability exists in certain .Net Framework API's and Visual Studio in the way they parse URL's. An attacker who successfully exploited this vulnerability could use it to bypass security logic intended to ensure that a user-provided URL belonged to a specific hostname or a subdomain of that...
Chromium CVE-2026-87651: Incorrect authorization in Paint
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87614: Incorrect authorization in ServiceWorker
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87605: Missing authorization in Contacts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87599: Improper input validation in Interstitials
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87566: Observable discrepancy in Layout
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87559: UI misrepresentation in UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79181 Observable discrepancy in Glic
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79136 Incorrect authorization in ServiceWorker
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-79009 UI misrepresentation in UI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17944 Inappropriate implementation in Chrome for iOS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17799 Insufficient validation of untrusted input in Safe Browsing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17901 Inappropriate implementation in Sharing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
Windows Update Stack Elevation of Privilege Vulnerability
Summary Microsoft was notified that an elevation of privilege vulnerability exists in Windows Update, potentially enabling an attacker with basic user privileges to reintroduce previously mitigated vulnerabilities or circumvent some features of Virtualization Based Security VBS. However, an...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Azure CLI REST Command Information Disclosure Vulnerability
...
GitHub: CVE-2023-29007 Arbitrary configuration injection via `git submodule deinit`
...
Microsoft OneNote Spoofing Vulnerability
...
Secure Boot Security Feature Bypass Vulnerability
...
Windows Remote Procedure Call Service (RPCSS) Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-1229 Inappropriate implementation in Permission prompts
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Publisher Security Feature Bypass Vulnerability
...
Windows Terminal Remote Code Execution Vulnerability
...
Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3653 Heap buffer overflow in Vulkan
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1637 Inappropriate implementation in Web Contents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1640 Use after free in Sharing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1480 Use after free in Device API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Azure Site Recovery Remote Code Execution Vulnerability
...
Chromium: CVE-2022-0789 Heap buffer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability
...
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
...
Microsoft PowerShell Spoofing Vulnerability
...
Chromium: CVE-2021-4057 Use after free in file API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Access Remote Code Execution Vulnerability
...
Microsoft Defender Remote Code Execution Vulnerability
...
Microsoft MPEG-2 Video Extension Remote Code Execution Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Windows User Profile Service Elevation of Privilege Vulnerability
...
Azure CycleCloud Elevation of Privilege Vulnerability
...
Windows Media MPEG-4 Video Decoder Remote Code Execution Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30548 Use after free in Loader
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...