28472 matches found
Media Foundation Information Disclosure Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Office Information Disclosure Vulnerability
...
Microsoft Office Graphics Remote Code Execution Vulnerability
...
.NET Denial of Service Vulnerability
...
Chromium: CVE-2022-0301 Heap buffer overflow in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Windows Modern Execution Server Remote Code Execution Vulnerability
...
Chromium: CVE-2021-38017 Insufficient policy enforcement in iframe sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Excel Remote Code Execution Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Chromium: CVE-2021-37970 Use after free in File System API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
...
Windows Storage Information Disclosure Vulnerability
...
.NET Core and Visual Studio Denial of Service Vulnerability
...
Windows Bluetooth Driver Elevation of Privilege Vulnerability
...
Windows Cryptographic Primitives Library Information Disclosure Vulnerability
...
Chromium: CVE-2021-30596 Incorrect security UI in Navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30565 Out of bounds write in Tab Groups
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30571 Insufficient policy enforcement in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30562 Use after free in WebSerial
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows DNS Server Remote Code Execution Vulnerability
...
Windows GDI Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30553 Use after free in Network service
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30552 Use after free in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Remote Desktop Services Denial of Service Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30523 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Container Isolation FS Filter Driver Elevation of Privilege Vulnerability
...
Dynamics Finance and Operations Cross-site Scripting Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
...
Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Azure DevOps Server and Team Foundation Services Spoofing Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
AV1 Video Extension Remote Code Execution Vulnerability
...
Microsoft Browser Memory Corruption Vulnerability
...
Microsoft Office Click-to-Run Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...
Microsoft Word Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Microsoft Word software when it fails to properly handle .LNK files. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, the file...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Windows UPnP Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs;...
Windows Print Workflow Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the AppContainer sandbox. To exploit this vulnerability, an attack...
Microsoft SharePoint Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted authentication request to an affected SharePoint server. An attacker who successfully exploited this vulnerability could execute malicious code on a vulnerable server in...
Microsoft Edge Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a piv...
Microsoft Power BI Report Server Spoofing Vulnerability
A spoofing vulnerability exists in Microsoft Power BI Report Server in the way it validates the content-type of uploaded attachments. An authenticated attacker could exploit the vulnerability by uploading a specially crafted payload and sending it to the user. The attacker who successfully...
Availability of updates for Microsoft software utilizing the Autodesk FBX library
Microsoft is announcing the release of updates to address multiple vulnerabilities found in the Autodesk FBX library which is integrated into certain Microsoft applications. Details about the vulnerabilities can be found here - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002...
Remote Code Execution Vulnerability in Application Inspector
A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code snippets from third-party source files into its HTML output. An attacker who exploited it could send sections of the report containing code snippets to an external...