24590 matches found
Windows DHCP Server Remote Code Execution Vulnerability
A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, a remote unauthenticated attacker could send a...
.NET Framework and .NET Core Denial of Service Vulnerability
A denial of service vulnerability exists when .NET Framework and .NET Core improperly process RegEx strings. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by...
Vulnerability in TPM could allow Security Feature Bypass
Executive Summary This advisory addresses CVE-2017-15361, also referred to as "Return of Coppersmith's Attack" ROCA. A security vulnerability exists in certain Trusted Platform Module TPM chipsets. The vulnerability weakens key strength. It is important to note that this is a firmware...
Windows Search Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full...
Windows Media Center Remote Code Execution Vulnerability
A vulnerability exists in Windows Media Center that could allow remote code execution if Windows Media Center opens a specially crafted Media Center link .mcl file that references malicious code. An attacker who successfully exploited this vulnerability could take control of an affected system...
Chromium: CVE-2026-17860 Insufficient validation of untrusted input in Mobile
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17939 Inappropriate implementation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network...
net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list
...
Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing
...
Visual Studio Code Elevation of Privilege Vulnerability
Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
Microsoft ActiveX Data Objects Remote Code Execution Vulnerability
...
Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
...
RedHat Openssh: CVE-2024-6387 Remote Code Execution Due To A Race Condition In Signal Handling
...
Windows Kernel Elevation of Privilege Vulnerability
...
NTFS Elevation of Privilege Vulnerability
...
Windows OLE Remote Code Execution Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Windows Authentication Elevation of Privilege Vulnerability
...
Windows User Interface Application Core Remote Code Execution Vulnerability
...
Windows HMAC Key Derivation Elevation of Privilege Vulnerability
...
Microsoft Windows Defender Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-3420 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Office Remote Code Execution Vulnerability
...
.NET and Visual Studio Elevation of Privilege Vulnerability
...
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
GitHub: CVE-2023-22743 Git for Windows Installer Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-1221 Insufficient policy enforcement in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Windows Event Logging Service Denial of Service Vulnerability
...
Chromium: CVE-2022-3195 Out of bounds write in Storage
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
Chromium: CVE-2022-1859 Use after free in Performance Manager
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-0799 Insufficient policy enforcement in Installer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability
...
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
...
Windows 10 Update Assistant Elevation of Privilege Vulnerability
...
Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30625 Use after free in Selection API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...