Windows Remote Desktop Protocol (RDP) Denial of Service Vulnerability

A denial of service vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could cause the RDP service on the target system to stop responding. To...

Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Azure DevOps Server ADO and Team Foundation Server TFS fail to validate input properly. An attacker who successfully exploited this vulnerability could execute code on the server in the context of the TFS or ADO service account. To exploit the...

Windows ALPC Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view...

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, t...

Visual Studio Information Disclosure Vulnerability

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE declaration. To exploit the vulnerability, an attacker could...

Visual Studio Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions. An attacker who successfully exploited this vulnerability overwrite arbitrary files with XML content in the security context of the local system. To exploit this vulnerabilit...

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Scripting Engine Information Disclosure Vulnerability

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...

Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

User interface ui misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network...

Windows TCP/IP Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Microsoft QUIC Denial of Service Vulnerability

...

GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds

...

Microsoft Outlook Remote Code Execution Vulnerability

...

Windows USB Generic Parent Driver Remote Code Execution Vulnerability

...

Windows NTFS Information Disclosure Vulnerability

...

Microsoft Dynamics 365 Sales Spoofing Vulnerability

...

Windows TCP/IP Information Disclosure Vulnerability

...

Layer 2 Tunneling Protocol Remote Code Execution Vulnerability

...

3D Builder Remote Code Execution Vulnerability

...

Microsoft Identity Linux Broker Remote Code Execution Vulnerability

...

Chromium: CVE-2023-4349 Use after free in Device Trust Connectors

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-4355 Out of bounds memory access in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Installer Information Disclosure Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

...

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

Microsoft OneNote Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-0705 Integer overflow in Core

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-0696 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium:CVE-2023-0132: Inappropriate implementation in Permission prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Office OneNote Remote Code Execution Vulnerability

...

Chromium: CVE-2022-4184 Insufficient policy enforcement in Autofill

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-4182 Inappropriate implementation in Fenced Frames

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Distributed File System (DFS) Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-2860 Insufficient policy enforcement in Cookies

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-2606 Use after free in Managed devices API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability

...

Chromium: CVE-2022-1499 Inappropriate implementation in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Installer Elevation of Privilege Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-0452 Use after free in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

...

Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-30626 Out of bounds memory access in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...