Lucene search
+L
MscveMost viewed

23108 matches found

Microsoft CVE
Microsoft CVE
•added 2018/02/13 8:0 a.m.•45 views

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS1.2AI score0.02271EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:0 a.m.•45 views

Microsoft Exchange Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...

8.1CVSS1.2AI score0.05884EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/11/14 8:0 a.m.•45 views

ASP.NET Core Elevation Of Privilege Vulnerability

An open redirect vulnerability exists in ASP.NET Core that could lead to elevation of privilege. To exploit the vulnerability, an attacker could send a link that has a specially crafted URL, and convince the user to click the link. When an authenticated user clicks the link, the authenticated...

8.8CVSS2.5AI score0.09398EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•45 views

Win32k Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...

9.3CVSS6.9AI score0.19023EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•45 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

6.5CVSS3.1AI score0.14265EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•45 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

9.3CVSS1.9AI score0.22127EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•45 views

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...

6.5CVSS3.6AI score0.14265EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•45 views

Windows PDF Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Windows, Microsoft Word 2013 and Microsoft Word 2016 if a user opens a specially crafted PDF file. An attacker who successfully exploited the vulnerability could cause arbitrary code to execute in the context of the current user. To exploi...

9.3CVSS4.8AI score0.24243EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/05/09 7:0 a.m.•45 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browser JavaScript engines render content when handling objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-based...

7.6CVSS7.7AI score0.16992EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/04/11 7:0 a.m.•45 views

CVE-2017-0203

A vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker could use this vulnerability to trick a user into loading a web page with malicious content. To exploit the vulnerability, an attacker mus...

4.3CVSS2AI score0.03922EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/04/11 7:0 a.m.•45 views

ADFS Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when ADFS incorrectly treats requests coming from Extranet clients as Intranet requests. To exploit this vulnerability, an attacker could run a specially crafted application and attempt to brute-force an account password. An attacker who successfully...

4.3CVSS2.9AI score0.03648EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/03/14 7:0 a.m.•45 views

Windows Transaction Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Transaction Manager improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability ...

7.8CVSS3.5AI score0.57482EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2017/03/14 7:0 a.m.•45 views

Windows Registry Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memory. An attacker who successfully exploited the vulnerability could gain elevated privileges on a targeted system. A locally authenticated attacker could exploit this vulnerability...

7CVSS3.8AI score0.02942EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2017/03/14 7:0 a.m.•45 views

Windows Uniscribe Remote Code Execution Vulnerability

A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accoun...

9.3CVSS7.3AI score0.42546EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2016/11/08 8:0 a.m.•45 views

Windows Bowser.sys Information Disclosure Vulnerability

An information disclosure vulnerability exists in Windows when the Windows bowser.sys kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could potentially disclose contents of System memory to which they should not have access. ...

5.8CVSS2.3AI score0.03457EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/09/13 7:0 a.m.•45 views

Microsoft Outlook Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft Outlook does not strictly adhere to RFC2046, and improperly identifies the end of a MIME attachment. An improper MIME attachment ending may cause antivirus or antispam scanning to not work as intended. To exploit the vulnerability, an attacker could...

6.5CVSS2.5AI score0.16232EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/07/12 7:0 a.m.•45 views

Secure Boot Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Windows Secure Boot improperly applies an affected policy. An attacker who successfully exploited this vulnerability could disable code integrity checks, allowing test-signed executables and drivers to be loaded on a target device. In addition, ...

6.2CVSS3.6AI score0.01486EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/06/14 7:0 a.m.•45 views

Windows WPAD Proxy Discovery Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Windows improperly handles certain proxy discovery scenarios using the Web Proxy Auto Discovery WPAD protocol method. An attacker who successfully exploited the vulnerability could potentially access and control network traffic for whi...

10CVSS4.2AI score0.77658EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2016/06/14 7:0 a.m.•45 views

Windows PDF Remote Code Execution

A remote code execution vulnerability exists in Microsoft Windows if a user opens a specially crafted .pdf file. An attacker who successfully exploited the vulnerabilities could cause arbitrary code to execute in the context of the current user. If a user is logged on with administrative user...

9.3CVSS5.8AI score0.33569EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/05/10 7:0 a.m.•45 views

Windows Imaging Component Memory Corruption Vulnerability

A remote code execution vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or...

9.3CVSS8.2AI score0.18423EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/14 2:0 p.m.•44 views

Windows USB Audio Class Driver Information Disclosure Vulnerability

Out-of-bounds read in Windows USB Audio Class driver usbaudio.sys allows an unauthorized attacker to disclose information with a physical attack...

6.8CVSS6.1AI score0.00488EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/07/03 2:0 p.m.•44 views

Chromium: CVE-2026-14092 Insufficient policy enforcement in Privacy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.9AI score0.00148EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/05/27 8:1 a.m.•44 views

net: skbuff: propagate shared-frag marker through frag-transfer helpers

...

8.8CVSS5.2AI score0.00337EPSS
SaveExploits7
Microsoft CVE
Microsoft CVE
•added 2026/05/12 2:0 p.m.•44 views

Visual Studio Code Elevation of Privilege Vulnerability

Session fixation in Visual Studio Code allows an unauthorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.0052EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/06/10 7:0 a.m.•44 views

Windows Storage Management Provider Information Disclosure Vulnerability

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...

5.5CVSS6.8AI score0.00526EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/05/01 10:16 p.m.•44 views

Chromium: CVE-2025-4052 Inappropriate implementation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.8CVSS7.5AI score0.0059EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/05/01 10:16 p.m.•44 views

Chromium: CVE-2025-4051 Insufficient data validation in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS7AI score0.00301EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/04/08 7:0 a.m.•44 views

Microsoft Excel Remote Code Execution Vulnerability

Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS7.3AI score0.01035EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/11 7:0 a.m.•44 views

Microsoft Office Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.00909EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/01/14 8:0 a.m.•44 views

Windows OLE Remote Code Execution Vulnerability

...

9.8CVSS7.1AI score0.80912EPSS
SaveExploits6
Microsoft CVE
Microsoft CVE
•added 2025/01/14 8:0 a.m.•44 views

.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability

...

8.8CVSS7.1AI score0.02301EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/12/12 8:0 a.m.•44 views

Microsoft Update Catalog Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Update Catalog allows an unauthorized attacker to elevate privileges on the website’s webserver...

9.8CVSS6.9AI score0.01314EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/12/10 8:0 a.m.•44 views

Lightweight Directory Access Protocol (LDAP) Client Remote Code Execution Vulnerability

...

8.1CVSS7.1AI score0.01396EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/10/17 7:0 a.m.•44 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

5.4CVSS7.1AI score0.0039EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:0 a.m.•44 views

Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str

...

8.8CVSS8.4AI score0.04296EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:0 a.m.•44 views

Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.03426EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/07/09 7:0 a.m.•44 views

Windows MSHTML Platform Spoofing Vulnerability

...

7.5CVSS7.6AI score0.84345EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/04/26 5:17 p.m.•44 views

Chromium: CVE-2024-4060 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS7.8AI score0.01003EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2024/04/09 7:0 a.m.•44 views

Secure Boot Security Feature Bypass Vulnerability

...

7.8CVSS7.3AI score0.10561EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/04/09 7:0 a.m.•44 views

Microsoft Brokering File System Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.00464EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/03/27 7:0 a.m.•44 views

Chromium: CVE-2024-2886 Use after free in WebCodecs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS7.8AI score0.0214EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2024/03/12 7:0 a.m.•44 views

.NET and Visual Studio Denial of Service Vulnerability

...

7.5CVSS7.1AI score0.03065EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/02/13 8:0 a.m.•44 views

Windows Kernel Elevation of Privilege Vulnerability

...

8.8CVSS7.3AI score0.20394EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/01/09 8:0 a.m.•44 views

Windows CoreMessaging Information Disclosure Vulnerability

...

5.5CVSS7.1AI score0.00887EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/01/05 5:8 p.m.•44 views

Chromium: CVE-2024-0224 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00998EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/11/29 6:18 p.m.•44 views

Chromium: CVE-2023-6351 Use after free in libavif

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00913EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/11/29 6:18 p.m.•44 views

Chromium: CVE-2023-6346 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.9AI score0.0097EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/11/14 8:0 a.m.•44 views

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

...

7.6CVSS7.3AI score0.00938EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/11/14 8:0 a.m.•44 views

Windows Search Service Elevation of Privilege Vulnerability

...

7CVSS7.3AI score0.06723EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/11/14 8:0 a.m.•44 views

ASP.NET Core Denial of Service Vulnerability

...

8.2CVSS7.3AI score0.02777EPSS
SaveExploits0
Total number of security vulnerabilities5000