23105 matches found
Windows Network File System Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows Security Account Manager (SAM) Denial of Service Vulnerability
...
Chromium: CVE-2025-5281 Inappropriate implementation in BFCache
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
...
Chromium: CVE-2025-5283 Use after free in libvpx
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows User Profile Service Elevation of Privilege Vulnerability
...
Microsoft Word Remote Code Execution Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Azure RTOS GUIX Studio Remote Code Execution Vulnerability
...
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the calling application. The attacker can then install programs,...
Microsoft Guidance for Speculative Store Bypass
Executive summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On May 21s...
Chromium: CVE-2025-5067 Inappropriate implementation in Tab Strip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Guest Configuration and Azure Arc-enabled servers Elevation of Privilege Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows NTLM Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Visual Studio Code Elevation of Privilege Vulnerability
...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could overwrite files in arbitrary locations with elevated permissions. To exploit the vulnerability, ...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks that attempt to exploit this vulnerability by using specially-crafted Microsoft Office documents. An attacker could craft a malicious Active...
Hackerone: CVE-2023-38039 HTTP headers eat all memory
...
Windows Server Service Remote Code Execution Vulnerability
...
Microsoft Office Word Tampering Vulnerability
...
Windows Internet Information Services Cachuri Module Denial of Service Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Windows File Explorer Elevation of Privilege Vulnerability
...
Windows Graphics Component Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Spoofing Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Chromium: CVE-2022-1364: Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2022-1364 exists in the wild...
Chromium: CVE-2023-2033 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-2033 exists in the wild...
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
Windows SMBv3 Client/Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 SMBv3 protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client. To exploit the vulnerabili...
Windows GDI+ Information Disclosure Vulnerability
...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
Network Policy Server (NPS) RADIUS Protocol Information Disclosure Vulnerability
...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30551 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Microsoft is aware of reports that exploits for CVE-2021-30551 exist in the wild...
Brotli Library Buffer Overflow Vulnerability
...