23105 matches found
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-1999 Use after free in libwebp
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Windows Hyper-V Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows DWM Core Library Elevation of Privilege Vulnerability
...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
Windows ALPC Elevation of Privilege Vulnerability
...
Microsoft Defender Denial of Service Vulnerability
...
Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability
...
Mitigating NTLM Relay Attacks on Active Directory Certificate Services (AD CS)
Summary Microsoft is aware of PetitPotam which can potentially be used in an attack on Windows domain controllers or other Windows servers. PetitPotam is a classic NTLM Relay Attack, and such attacks have been previously documented by Microsoft along with numerous mitigation options to protect...
Paint 3D Remote Code Execution Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
YARP Denial of Service Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability
...
Microsoft Office Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, ...
Microsoft DWM Core Library Elevation of Privilege Vulnerability
...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Kerberos KDC Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the way Key Distribution Center KDC determines if a service ticket can be used for delegation via Kerberos Constrained Delegation KCD. To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service...
Microsoft ODBC Driver Remote Code Execution Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Push Notifications Apps Elevation of Privilege Vulnerability
...
Microsoft PowerPoint Remote Code Execution Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Skype for Business Remote Code Execution Vulnerability
...
Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
...
CERT/CC: CVE-20220-34303 Crypto Pro Boot Loader Bypass
...
Microsoft Excel Remote Code Execution Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows File Server Resource Management Service Elevation of Privilege Vulnerability
...
Windows Backup Service Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows DWM Core Library Information Disclosure Vulnerability
Use of uninitialized resource in Windows DWM Core Library allows an authorized attacker to disclose information locally...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30563 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to have been exploited in the wild...
Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability
...
Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
...
Windows Fax Compose Form Remote Code Execution Vulnerability
...
Windows Hyper-V Shared Virtual Hard Disks Information Disclosure Vulnerability
...
Skype for Business Information Disclosure Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability
...
Windows Hello Security Feature Bypass Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Windows Storage Management Provider Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...
Microsoft Guidance for Enabling Request Smuggling Filter on IIS Servers
Executive Summary Microsoft is aware of a tampering vulnerability in the way that HTTP proxies front-end and web servers back-end that do not strictly adhere to RFC standards handle sequences of HTTP requests received from multiple sources. An attacker who successfully exploited the vulnerability...
Windows Print Spooler Elevation of Privilege Vulnerability
...