Chromium: CVE-2023-5480 Inappropriate implementation in Payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-5472: Use after free in Profiles

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

...

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-4863 exists in the wild...

Windows Cryptographic Services Information Disclosure Vulnerability

...

Microsoft Outlook Spoofing Vulnerability

...

.NET Framework Spoofing Vulnerability

...

Chromium: CVE-2023-3732 Out of bounds memory access in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Local Security Authority (LSA) Denial of Service Vulnerability

...

Windows Hello Remote Code Execution Vulnerability

...

Windows Lock Screen Security Feature Bypass Vulnerability

...

Chromium: CVE-2023-1236 Inappropriate implementation in Internals

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

MITRE: CVE-2019-15126 Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device

An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors related to state transitions in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a...

Chromium: CVE-2022-4436 Use after free in Blink Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Outlook for Mac Spoofing Vulnerability

...

Chromium: CVE-2022-4190 Insufficient data validation in Directory

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-3448 Use after free in Permissions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft ODBC Driver Remote Code Execution Vulnerability

...

Chromium: CVE-2022-2857 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Defender Credential Guard Elevation of Privilege Vulnerability

...

Windows Kerberos Elevation of Privilege Vulnerability

...

Windows DNS Server Remote Code Execution Vulnerability

...

Chromium: CVE-2022-0978 Use after free in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Word Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Chromium: CVE-2021-37974 Use after free in Safe Browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30630 Inappropriate implementation in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

Windows Storage Information Disclosure Vulnerability

...

Chromium: CVE-2021-30617 Policy bypass in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Recovery Environment Agent Elevation of Privilege Vulnerability

...

Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Win32k Elevation of Privilege Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Chromium: CVE-2021-30553 Use after free in Network service

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Remote Desktop Services Denial of Service Vulnerability

...

Windows Hyper-V Denial of Service Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-30540 Incorrect security UI in payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Remote Procedure Call Runtime Remote Code Execution Vulnerability

...

Visual Studio Code Remote Code Execution Vulnerability

...

Windows Event Tracing Elevation of Privilege Vulnerability

...

Visual Studio Code npm-script Extension Remote Code Execution Vulnerability

...

Windows Backup Engine Elevation of Privilege Vulnerability

...

Microsoft SharePoint Elevation of Privilege Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

...

Microsoft Outlook Denial of Service Vulnerability

A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires that a...

Windows Hyper-V Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory. An attacker who successfully exploited these vulnerabilities could gain elevated privileges on a target operating system. This vulnerability by itself does not allow...