23143 matches found
Chromium CVE-2020-27844: Heap buffer overflow in OpenJPEG
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Print Configuration Elevation of Privilege Vulnerability
...
Microsoft Browser Memory Corruption Vulnerability
...
Windows MSCTF Server Information Disclosure Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
Windows Font Driver Host Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Windows Font Driver Hos...
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...
Azure Stack Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Azure Stack fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Windows Admin Center Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker with unprivileged access to a vulnerable system could exploit th...
Microsoft XmlDocument Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer...
Windows Denial of Service Vulnerability
Microsoft is aware of a denial of service vulnerability named "FragmentSmack" CVE-2018-5391 affecting Windows systems. An attacker could send many 8-byte sized IP fragments with random starting offsets, but withhold the last fragment and exploit the worst-case complexity of linked lists in...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Microsoft Guidance for Lazy FP State Restore
Executive summary On January 3, 2018, Microsoft released an advisory and security updates related to a newly-discovered class of hardware vulnerabilities known as Spectre and Meltdown involving speculative execution side channels that affect AMD, ARM, and Intel CPUs to varying degrees. On June 13...
February 2018 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB18-03: CVE-2018-4877 and CVE-2018-4878...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content. To exploit the bypas...
SQL RDBMS Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft SQL Server when it improperly handles pointer casting. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited this vulnerability...
Windows TCP/IP Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to elevate privileges over an adjacent network...
PostgreSQL REFRESH PUBLICATION allows SQL injection via table name
...
Chromium: CVE-2025-3074 Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally...
Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally...
Windows Remote Desktop Services Remote Code Execution Vulnerability
...
Windows Hyper-V Security Feature Bypass Vulnerability
...
Chromium: CVE-2024-6103: Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2024-3914 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
Microsoft QUIC Denial of Service Vulnerability
...
Microsoft Defender for Endpoint Protection Elevation of Privilege Vulnerability
...
Windows USB Generic Parent Driver Remote Code Execution Vulnerability
...
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
...
Chromium: CVE-2024-1284 Use after free in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Adobe Systems Incorporated: CVE-2024-20721 Improper Input Validation Denial of Service Vulnerability
...
Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
...
PowerShell Information Disclosure Vulnerability
...
Chromium: CVE-2023-6112 Use after free in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Microsoft Dynamics 365 Sales Spoofing Vulnerability
...
Windows Authentication Denial of Service Vulnerability
...
Windows NTFS Information Disclosure Vulnerability
...
Microsoft QUIC Denial of Service Vulnerability
...
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
...
AutoDesk: CVE-2023-27911 Heap buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior
...
GitHub: CVE-2023-25815 Git looks for localized messages in an unprivileged place
...
Windows NFS Portmapper Information Disclosure Vulnerability
...