Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Azure DevOps Server ADO and Team Foundation Server TFS fail to validate input properly. An attacker who successfully exploited this vulnerability could execute code on the server in the context of the TFS or ADO service account. To exploit the...

Microsoft Outlook Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, t...

Visual Studio Information Disclosure Vulnerability

An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE declaration. To exploit the vulnerability, an attacker could...

Windows Hyper-V Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker could run a specially crafted application on a guest operating system that could...

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

Windows Search Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full...

Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

.NET Framework Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft .NET Framework fails to properly validate input before loading libraries. An attacker who successfully exploited this vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delet...

Windows TCP/IP Remote Code Execution Vulnerability

...

Chromium: CVE-2024-2887 Type Confusion in WebAssembly

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Hyper-V Remote Code Execution Vulnerability

...

Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability

...

Windows OLE Remote Code Execution Vulnerability

...

MITRE: CVE-2022-35737 SQLite allows an array-bounds overflow

...

BitLocker Security Feature Bypass Vulnerability

...

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

Windows IIS Server Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-4070 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-3420 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-3215 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

...

Visual Studio Spoofing Vulnerability

...

Microsoft Office Remote Code Execution Vulnerability

...

Chromium: CVE-2023-1818 Use after free in Vulkan

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Kernel Elevation of Privilege Vulnerability

...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability

...

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

...

Chromium: CVE-2023-1224 Insufficient policy enforcement in Web Payments API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-1214 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability

...

Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability

...

Chromium: CVE-2023-0705 Integer overflow in Core

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium:CVE-2023-0132: Inappropriate implementation in Permission prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Fax Service Remote Code Execution Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-2854 Use after free in SwiftShader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1876 Heap buffer overflow in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1869 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-1498 Inappropriate implementation in HTML Parser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Visual Studio Elevation of Privilege Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Windows DNS Server Remote Code Execution Vulnerability

...

Chromium: CVE-2022-0452 Use after free in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

OpenSSL: CVE-2020-1971 EDIPARTYNAME NULL pointer de-reference

...

Chromium: CVE-2021-37970 Use after free in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...