Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-1818 Use after free in Vulkan

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Secure Channel Denial of Service Vulnerability

...

Chromium: CVE-2023-1234 Inappropriate implementation in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-0703 Type Confusion in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2022-3775

...

Microsoft Windows System Monitor (Sysmon) Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Windows DHCP Client Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-3373 Out of bounds write in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-3058 Use after free in Sign-In Flow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Chromium: CVE-2022-1635 Use after free in Permission Prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1314 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Hyper-V Remote Code Execution Vulnerability

...

Skype for Business and Lync Spoofing Vulnerability

...

Win32 Stream Enumeration Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Chromium: CVE-2022-0795 Type Confusion in Blink Layout

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Defender Credential Guard Security Feature Bypass Vulnerability

...

Chromium: CVE-2021-4098 Insufficient data validation in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Spoofing Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Windows MSHTML Platform Remote Code Execution Vulnerability

...

Windows Hello Security Feature Bypass Vulnerability

...

Windows AF_UNIX Socket Provider Denial of Service Vulnerability

...

Chromium: CVE-2021-30507 Inappropriate implementation in Offline

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office Remote Code Execution Vulnerability

...

Common Utilities Remote Code Execution Vulnerability

...

Chromium: CVE-2021-21232 Use after free in Dev Tools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-21202 Use after free in extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Azure DevOps Server Spoofing Vulnerability

...

Windows Win32k Elevation of Privilege Vulnerability

...

Microsoft SharePoint Remote Code Execution Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Microsoft SharePoint Information Disclosure Vulnerability

...

Windows Network File System Denial of Service Vulnerability

...

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

Windows Certificate Dialog Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete...

Windows DHCP Server Remote Code Execution Vulnerability

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, a remote unauthenticated attacker could send a...

.NET Framework and .NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by...

Vulnerability in TPM could allow Security Feature Bypass

Executive Summary This advisory addresses CVE-2017-15361, also referred to as "Return of Coppersmith's Attack" ROCA. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. It is important to note that this is a firmware...

Windows Search Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full...

Windows Media Center Remote Code Execution Vulnerability

A vulnerability exists in Windows Media Center that could allow remote code execution if Windows Media Center opens a specially crafted Media Center link .mcl file that references malicious code. An attacker who successfully exploited this vulnerability could take control of an affected system...

Chromium: CVE-2026-17939 Inappropriate implementation in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-17860 Insufficient validation of untrusted input in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...