24590 matches found
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
...
Windows Cluster Shared Volume (CSV) Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Microsoft Defender for Endpoint Spoofing Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Windows AppContracts API Server Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30626 Out of bounds memory access in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30565 Out of bounds write in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Defender Remote Code Execution Vulnerability
...
Windows GDI Elevation of Privilege Vulnerability
...
Windows Remote Desktop Services Denial of Service Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30523 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30515 Use after free in File API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2020-27844: Heap buffer overflow in OpenJPEG
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Event Tracing Elevation of Privilege Vulnerability
...
Windows Event Tracing Elevation of Privilege Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Excel Security Feature Bypass Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft Browser Memory Corruption Vulnerability
...
Windows Print Configuration Elevation of Privilege Vulnerability
...
Windows Spoofing Vulnerability
A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and load improperly signed files. In an attack scenario, an attacker could bypass security features intended to prevent...
Visual Studio JSON Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when a user is tricked into opening a malicious 'package.json' file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Windows Font Driver Host Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory. An attacker who successfully exploited the vulnerability would gain execution on a victim system. The security update addresses the vulnerability by correcting how the Windows Font Driver Hos...
Type 1 Font Parsing Remote Code Execution Vulnerability
Microsoft has become aware of limited targeted Windows 7 based attacks that could leverage un-patched vulnerabilities in the Adobe Type Manager Library, and is providing the following guidance to help reduce customer risk until the security update is released. We appreciate the efforts of our...
Microsoft SQL Server Reporting Services XSS Vulnerability
A cross-site scripting XSS vulnerability exists when Microsoft SQL Server Reporting Services SSRS does not properly sanitize a specially-crafted web request to an affected SSRS server. An attacker who successfully exploited the vulnerability could run scripts in the context of the targeted user...
Azure Stack Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Azure Stack fails to check the length of a buffer prior to copying memory to it. An attacker who successfully exploited this vulnerability could allow an unprivileged function run by the user to execute code in the context of NT AUTHORITY\system...
Windows ALPC Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view...
ADFS Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Active Directory Federation Services ADFS which could allow an attacker to bypass the extranet lockout policy. To exploit this vulnerability, an attacker could run a specially crafted application, which would allow an attacker to launch a password...
Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows AppX Deployment Service AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Microsoft IIS Server Denial of Service Vulnerability
A denial of service exists in Microsoft IIS Server when the optional request filtering feature improperly handles requests. An attacker who successfully exploited this vulnerability could perform a temporary denial of service against pages configured to use request filtering. To exploit this...
Bluetooth Low Energy Advisory
Executive Summary Microsoft is aware of an issue that affects the Bluetooth Low Energy BLE version of FIDO Security Keys. Due to a misconfiguration in the Bluetooth pairing protocols, it is possible for an attacker who is physically close to a user at the moment he/she uses the security key to...
Windows DHCP Server Remote Code Execution Vulnerability
A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP server. An attacker who successfully exploited the vulnerability could run arbitrary code on the DHCP server. To exploit the vulnerability, an attacker could send...
Microsoft XmlDocument Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer...
Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Windows Deployment Services TFTP Server handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with elevated permissions on a target system. To exploit the vulnerability, an...
Microsoft Exchange Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the system user. An attacker could then install programs; view, change,...
Windows Denial of Service Vulnerability
Microsoft is aware of a denial of service vulnerability named "FragmentSmack" CVE-2018-5391 affecting Windows systems. An attacker could send many 8-byte sized IP fragments with random starting offsets, but withhold the last fragment and exploit the worst-case complexity of linked lists in...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
February 2018 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB18-03: CVE-2018-4877 and CVE-2018-4878...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...