28472 matches found
Windows Hyper-V Remote Code Execution Vulnerability
...
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
...
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
Windows Certificate Spoofing Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Chromium: CVE-2021-30524 Use after free in TabStrip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
.NET and Visual Studio Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21202 Use after free in extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Microsoft Office ClickToRun Remote Code Execution Vulnerability
...
PFX Encryption Security Feature Bypass Vulnerability
...
Microsoft Windows Security Feature Bypass Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Windows Function Discovery SSDP Provider Information Disclosure Vulnerability
...
HEIF Image Extensions Remote Code Execution Vulnerability
...
Microsoft Exchange Information Disclosure Vulnerability
An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user. To exploit the vulnerability, an attacker could include...
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...
Windows Text Service Module Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Text Service Module improperly handles memory. An attacker who successfully exploited the vulnerability could gain execution on a victim system. An attacker could host a specially crafted website that is designed to exploit the...
Azure DevOps Server HTML Injection Vulnerability
A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive information. An...
Visual Studio Code Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on...
VBScript Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...
Azure DevOps and Team Foundation Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Azure DevOps Server ADO and Team Foundation Server TFS fail to validate input properly. An attacker who successfully exploited this vulnerability could execute code on the server in the context of the TFS or ADO service account. To exploit the...
Microsoft Outlook Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, t...
Windows Admin Center Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Admin Center improperly impersonates operations in certain situations. An attacker who successfully exploited this vulnerability could gain elevated privileges. An attacker with unprivileged access to a vulnerable system could exploit th...
Named Pipe File System Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exist when Named Pipe File System improperly handles objects. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then...
Microsoft Malware Protection Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...
Windows Search Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full...
Win32k Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or...
Chromium: CVE-2026-17939 Inappropriate implementation in Passwords
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Libxpm: libxpm: denial of service via out-of-bounds read in xpm file parsing
...
ARM: CVE-2025-10263 Completion of affected memory accesses might not be guaranteed by completion of a TLBI [kernel]
No cwe for this issue in Windows Kernel allows an unauthorized attacker to elevate privileges locally...
Web Threat Defense (WTD.sys) Denial of Service Vulnerability
Out-of-bounds read in Web Threat Defense WTD.sys allows an unauthorized attacker to deny service over a network...
Windows Routing and Remote Access Service (RRAS) Information Disclosure Vulnerability
Buffer over-read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
Active Directory Domain Services Elevation of Privilege Vulnerability
Improper access control in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...
Power BI Report Server Spoofing Vulnerability
...
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
ASP.NET Core Denial of Service Vulnerability
...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-3420 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
...
AutoDesk: CVE-2023-27910 stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior
...
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
...
Chromium: CVE-2023-1228 Insufficient policy enforcement in Intents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...