24590 matches found
Chromium: CVE-2021-4102 Use after free in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reports that an exploit for CVE-2021-4102 exists in the wild...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-38013 Heap buffer overflow in fingerprint recognition
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Microsoft Surface Pro 3 Security Feature Bypass Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Chromium: CVE-2021-30628 Stack buffer overflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
...
Chromium: CVE-2021-30611 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30598 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Microsoft Bing Search Spoofing Vulnerability
...
Server for NFS Information Disclosure Vulnerability
...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30532 Insufficient policy enforcement in Content Security Policy
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30527 Use after free in WebUI
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30518 Heap buffer overflow in Reader Mode
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Media Foundation Core Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
...
Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability
...
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
...
Windows Graphics Component Remote Code Execution Vulnerability
...
Microsoft SharePoint Elevation of Privilege Vulnerability
...
Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability
...
Windows Backup Engine Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Windows Hyper-V Security Feature Bypass Vulnerability
...
Azure Sphere Unsigned Code Execution Vulnerability
...
Azure Sphere Unsigned Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft SharePoint Server Tampering Vulnerability
A tampering vulnerability exists when Microsoft SharePoint Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...
Windows Defender Application Control Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Windows Defender Application Control WDAC which could allow an attacker to bypass WDAC enforcement. An attacker who successfully exploited this vulnerability could execute PowerShell commands that would be blocked by WDAC. To exploit the...
Windows State Repository Service Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows State Repository Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An attacker could exploit this vulnerability b...
GDI+ Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...
Windows Print Workflow Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory. An attacker who successfully exploited this vulnerability could gain elevated privileges and break out of the AppContainer sandbox. To exploit this vulnerability, an attack...
Office Web Apps XSS Vulnerability
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected Office Web Apps server. The attacker who successfully exploited th...
System Center Operations Manager Spoofing Vulnerability
A spoofing vulnerability exists when System Center Operations Manager SCOM does not properly sanitize a specially crafted web request to an affected SCOM 2016 Web Console instance. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SCOM...
.NET Framework Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by...