24507 matches found
Windows Print Spooler Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-1999 Use after free in libwebp
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows Hyper-V Elevation of Privilege Vulnerability
...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
Microsoft Defender Denial of Service Vulnerability
...
Windows ALPC Elevation of Privilege Vulnerability
...
Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)
Summary Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers. PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect...
Paint 3D Remote Code Execution Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
...
YARP Denial of Service Vulnerability
...
Microsoft Office Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft PowerPoint Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Kerberos KDC Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
...
Windows Push Notifications Apps Elevation of Privilege Vulnerability
...
CERT/CC: CVE-20220-34303 Crypto Pro Boot Loader Bypass
...
Microsoft Excel Remote Code Execution Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Skype for Business Remote Code Execution Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30563 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to have been exploited in the wild...
Windows Backup Service Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
...
Microsoft Guidance for Addressing Spoofing Vulnerability in DNS Resolver
Microsoft is aware of a vulnerability involving DNS cache poisoning caused by IP fragmentation that affects Windows DNS Resolver. An attacker who successfully exploited this vulnerability could spoof the DNS packet which can be cached by the DNS Forwarder or the DNS Resolver. For more information...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
...
Windows DWM Core Library Information Disclosure Vulnerability
Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally...
Skype for Business Information Disclosure Vulnerability
...
Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
...
Windows Fax Compose Form Remote Code Execution Vulnerability
...
Microsoft Guidance for Enabling Request Smuggling Filter on IIS Servers
Executive Summary Microsoft is aware of a tampering vulnerability in the way that HTTP proxies front-end and web servers back-end that do not strictly adhere to RFC standards handle sequences of HTTP requests received from multiple sources. An attacker who successfully exploited the vulnerability...
Windows Storage Management Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
Windows Kernel Elevation of Privilege Vulnerability
...
Windows Hello Security Feature Bypass Vulnerability
...
Windows GPSVC Elevation of Privilege Vulnerability
...
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
...