24590 matches found
Chromium: CVE-2026-17954 Policy bypass in MHTML
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-17773 Insufficient validation of untrusted input in Cast
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network...
Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing
...
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...
Microsoft Outlook Remote Code Execution Vulnerability
...
Visual Studio Denial of Service Vulnerability
...
NTFS Elevation of Privilege Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have acces...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Windows Authentication Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-4349 Use after free in Device Trust Connectors
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Chromium: CVE-2023-1532 Out of bounds read in GPU Video
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
...
Chromium: CVE-2023-0933 Integer overflow in PDF
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
...
Chromium: CVE-2023-0472 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Kernel Information Disclosure Vulnerability
...
Azure RTOS GUIX Studio Information Disclosure Vulnerability
...
Chromium: CVE-2022-1308 Use after free in BFCache
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Windows ALPC Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-1146 Inappropriate implementation in Resource Timing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-0604 Heap buffer overflow in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Graphics Component Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21203 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows Port Class Library Elevation of Privilege Vulnerability
...
Microsoft SharePoint Reflective XSS Vulnerability
This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server. An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server. The attacker who...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Visual Studio Code Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on...
Windows Admin Center Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker with unprivileged access to a vulnerable system could exploit th...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Chromium: CVE-2026-11641 Use after free in Bluetooth
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Remote Desktop Services Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
GitHub: CVE-2024-21626 Container breakout through process.cwd trickery and leaked fds
...
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
...
BitLocker Security Feature Bypass Vulnerability
...
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
...