28472 matches found
Windows Graphics Component Information Disclosure Vulnerability
...
Chromium: CVE-2022-1499 Inappropriate implementation in WebAuthentication
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1498 Inappropriate implementation in HTML Parser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2022-1309 Insufficient policy enforcement in developer tools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Digital Media Receiver Elevation of Privilege Vulnerability
...
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
GitHub: Uncontrolled search for the Git directory in Git for Windows
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Media Foundation Information Disclosure Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
.NET Denial of Service Vulnerability
...
Microsoft Outlook for Mac Security Feature Bypass Vulnerability
...
Windows AppContracts API Server Elevation of Privilege Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Chromium: CVE-2021-4066 Integer underflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
...
.NET Core and Visual Studio Denial of Service Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30565 Out of bounds write in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30571 Insufficient policy enforcement in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30552 Use after free in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30523 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Skype for Business and Lync Spoofing Vulnerability
...
Windows Event Tracing Elevation of Privilege Vulnerability
...
Windows Update Medic Service Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows Bind Filter Driver Elevation of Privilege Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Visual Studio Code JSHint Extension Remote Code Execution Vulnerability
...
Microsoft Browser Memory Corruption Vulnerability
...
Microsoft Outlook Denial of Service Vulnerability
A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires that a...
Windows Cryptographic Catalog Services Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Cryptographic Catalog Services improperly handle objects in memory. An attacker who successfully exploited this vulnerability could modify the cryptographic catalog. To exploit this vulnerability, an attacker would first have to log ...
Windows Modules Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...
Visual Studio Code Python Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads workspace settings from a notebook file. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
OpenSSL Remote Denial of Service Vulnerability
Microsoft is aware of a publicly disclosed remote denial of service vulnerability for OpenSSL version 1.1.1d and newer. Previous versions prior to 1.1.1d are unaffected. The vulnerability is fixed in version 1.1.1g. For more information, please see the OpenSSL security advisory. Microsoft has...
Type 1 Font Parsing Remote Code Execution Vulnerability
Microsoft has become aware of limited targeted Windows 7 based attacks that could leverage un-patched vulnerabilities in the Adobe Type Manager Library, and is providing the following guidance to help reduce customer risk until the security update is released. We appreciate the efforts of our...
Remote Code Execution Vulnerability in Application Inspector
A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output. An attacker who exploited it could send sections of the report containing code snippets to an external...
Microsoft Outlook Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats. The security feature bypass by itself does not allow arbitrary code execution. However, to successfully exploit the vulnerability, an attacker would have to use it i...
HTTP/2 Server Denial of Service Vulnerability
A denial of service vulnerability exists in the HTTP/2 protocol stack HTTP.sys when HTTP.sys improperly parses specially crafted HTTP/2 requests. An attacker who successfully exploited the vulnerability could create a denial of service condition, causing the target system to become unresponsive. ...
Microsoft XmlDocument Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the Microsoft XmlDocument class that could allow an attacker to escape from the AppContainer sandbox in the browser. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the Edge AppContainer...