Windows SMB Witness Service Security Feature Bypass Vulnerability

...

Visual Studio Elevation of Privilege Vulnerability

...

Windows Hyper-V Denial of Service Vulnerability

...

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

...

Chromium: CVE-2023-1234 Inappropriate implementation in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium:CVE-2023-0140: Inappropriate implementation in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Outlook for Mac Spoofing Vulnerability

...

Chromium: CVE-2022-3373 Out of bounds write in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-3195 Out of bounds write in Storage

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

Chromium: CVE-2022-2161 Use after free in WebApp Provider

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-2008 Out of bounds memory access in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1857 Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1874 Insufficient policy enforcement in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1635 Use after free in Permission Prompts

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1501 Inappropriate implementation in iframe

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1314 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Hyper-V Remote Code Execution Vulnerability

...

Microsoft Defender for IoT Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Windows StateRepository API Server file Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-38016 Insufficient policy enforcement in background fetch

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Windows 10 Update Assistant Elevation of Privilege Vulnerability

...

Active Directory Domain Services Elevation of Privilege Vulnerability

...

Microsoft Virtual Machine Bus (VMBus) Remote Code Execution Vulnerability

...

Chromium: CVE-2021-38002 Use after free in Web Transport

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Hyper-V Remote Code Execution Vulnerability

...

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Windows MSHTML Platform Remote Code Execution Vulnerability

...

Windows Certificate Spoofing Vulnerability

...

Windows Storage Spaces Controller Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Chromium: CVE-2021-30524 Use after free in TabStrip

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Raw Image Extension Remote Code Execution Vulnerability

...

Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability

...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Microsoft Office ClickToRun Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Windows Function Discovery SSDP Provider Information Disclosure Vulnerability

...

HEIF Image Extensions Remote Code Execution Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Exchange Information Disclosure Vulnerability

An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user. To exploit the vulnerability, an attacker could include...

Active Directory Information Disclosure Vulnerability

An information disclosure vulnerability exists when Active Directory integrated DNS ADIDNS mishandles objects in memory. An authenticated attacker who successfully exploited this vulnerability would be able to read sensitive information about the target system. To exploit this condition, an...

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

Windows Text Service Module Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system. An attacker could host a specially crafted website that is designed to exploit the...