28472 matches found
Remote Desktop Protocol Drive Redirection Information Disclosure Vulnerability
An information disclosure vulnerability exists in Microsoft Windows when a USB disk mounted over Remote Desktop Protocol RDP via Microsoft RemoteFX is not correctly tied to the session of the mounting user. An attacker who successfully exploited this vulnerability could obtain access to file and...
Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer
...
alsa-lib through 1.2.16.1 Denial of Service via pcm_multi
...
GNU Binutils elflink.c elf_link_add_object_symbols null pointer dereference
...
checkwildcard() accepts an out-of-zone NSEC as a wildcard-nonexistence proof
...
Resource Exhaustion via Excessive DNSSEC Cryptographic Material Matching
...
Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC
...
Windows DNS Server Remote Code Execution Vulnerability
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows DNS allows an authorized attacker to execute code over a network...
xfrm: esp: avoid in-place decrypt on shared skb frags
...
Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vulnerability
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network...
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office allows an unauthorized attacker to execute code locally...
Microsoft Outlook Spoofing Vulnerability
...
Windows Direct Show Remote Code Execution Vulnerability
...
Windows Hyper-V Remote Code Execution Vulnerability
...
Chromium: CVE-2024-11111 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Network Virtualization Remote Code Execution Vulnerability
...
Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability
...
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
...
Lenovo: CVE-2024-23594 Stack buffer overflow in Lenovo system recovery boot manager
...
Microsoft Brokering File System Elevation of Privilege Vulnerability
...
Chromium: CVE-2024-2173 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2024-1670 Use after free in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Dynamics Business Central/NAV Information Disclosure Vulnerability
...
Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
Windows Kerberos Security Feature Bypass Vulnerability
...
Chromium: CVE-2023-7024 Heap buffer overflow in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-7024 exists in the wild...
Chromium: CVE-2023-6705 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-6350 Out of bounds memory access in libavif
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
...
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
...
Chromium: CVE-2023-5346 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Teams Remote Code Execution Vulnerability
...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Azure Arc-Enabled Servers Elevation of Privilege Vulnerability
...
Windows Mobile Device Management Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-3217 Use after free in WebXR
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-1231 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
...
Chromium:CVE-2023-0130: Inappropriate implementation in Fullscreen API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge (Chromium-based) Spoofing Vulnerability
...
Chromium: CVE-2022-4195 Insufficient policy enforcement in Safe Browsing
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-3448 Use after free in Permissions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Defender Credential Guard Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Chromium: CVE-2022-1862 Inappropriate implementation in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1487 Use after free in Ozone
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-1482 Inappropriate implementation in WebGL
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...