24590 matches found
OpenSSL Remote Denial of Service Vulnerability
Microsoft is aware of a publicly disclosed remote denial of service vulnerability for OpenSSL version 1.1.1d and newer. Previous versions prior to 1.1.1d are unaffected. The vulnerability is fixed in version 1.1.1g. For more information, please see the OpenSSL security advisory. Microsoft has...
Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection. An attacker who successfully exploited this vulnerability could execute arbitrary code on the victim system. An attacker cou...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Microsoft Dynamics On-Premise Security Feature Bypass
A security feature bypass vulnerability exists in Dynamics On Premise. An attacker who exploited the vulnerability could send attachment types that are blocked by the email attachment system. To exploit the vulnerability, an attacker would need to capture and edit the POST request to include a...
Skype for Business and Lync Spoofing Vulnerability
A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The attacker who successfully exploited...
Windows Firewall Denial of Service Vulnerability
A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections. An attacker who successfully exploited the vulnerability could cause a target system to stop responding. To exploit the vulnerability, an unauthenticated attacker could send specially...
Microsoft InfoPath Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrati...
Microsoft Edge Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Microsoft Edge improperly handles redirect requests. The vulnerability allows Microsoft Edge to bypass Cross-Origin Resource Sharing CORS redirect restrictions, and to follow redirect requests that should otherwise be ignored. An attacker who...
Scripting Engine Information Disclosure Vulnerability
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...
Windows Graphics Component Remote Code Execution Vulnerability
A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...
Secure Boot Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when Windows Secure Boot improperly loads a boot manager that is affected by the vulnerability. An attacker who successfully exploited this vulnerability could disable code integrity checks, allowing test-signed executables and drivers to be loaded...
Chromium: CVE-2026-17902 Inappropriate implementation in Editing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
Microsoft Excel Information Disclosure Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally...
Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh
...
Chromium: CVE-2025-3074 Inappropriate implementation in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows TCP/IP Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Chromium: CVE-2024-6103: Use after free in Dawn
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Authentication Elevation of Privilege Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
Microsoft Azure Kubernetes Service Confidential Container Remote Code Execution Vulnerability
...
Chromium: CVE-2024-0519 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reports that an exploit for CVE-2024-0519 exists in the wild...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Azure DevOps Server Remote Code Execution Vulnerability
...
ASP.NET Security Feature Bypass Vulnerability
...
Microsoft Dynamics 365 Sales Spoofing Vulnerability
...
Microsoft QUIC Denial of Service Vulnerability
...
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
...
Visual Studio Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows Layer-2 Bridge Network Driver Remote Code Execution Vulnerability
...
Windows Installer Information Disclosure Vulnerability
...
Windows Hello Remote Code Execution Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
...
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
...
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Windows Graphics Component Remote Code Execution Vulnerability
...
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
...
Chromium: CVE-2023-0702 Type Confusion in Data Transfer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-4183 Insufficient policy enforcement in Popup Blocker
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...