23108 matches found
Chromium: CVE-2022-3304 Use after free in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2022-3317 Insufficient validation of untrusted input in Intents
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Remote Desktop Client Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Roaming Security Rights Management Services Remote Code Execution Vulnerability
...
Microsoft Office Visio Remote Code Execution Vulnerability
...
Microsoft Dynamics GP Remote Code Execution Vulnerability
...
Local Security Authority Subsystem Service Elevation of Privilege Vulnerability
...
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
...
Remote Desktop Protocol Remote Code Execution Vulnerability
...
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
...
Microsoft Defender for IoT Remote Code Execution Vulnerability
...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Windows Feedback Hub Elevation of Privilege Vulnerability
...
Remote Desktop Client Remote Code Execution Vulnerability
...
Windows HTTP.sys Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-37960 Inappropriate implementation in Blink graphics
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30629 Use after free in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30609 Use after free in Sign-In
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30602 Use after free in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows User Account Profile Picture Elevation of Privilege Vulnerability
...
Server for NFS Information Disclosure Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Chromium: CVE-2021-30531 Insufficient policy enforcement in Content Security Policy
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Denial of Service Update
...
Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Windows Console Driver Denial of Service Vulnerability
...
Windows Installer Spoofing Vulnerability
...
Windows AppX Deployment Server Denial of Service Vulnerability
...
Chromium CVE-2021-21159: Heap buffer overflow in TabStrip
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Information Disclosure Vulnerability
...
Windows Address Book Remote Code Execution Vulnerability
...
Windows Bluetooth Security Feature Bypass Vulnerability
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the...
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
...
Windows Win32k Elevation of Privilege Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Windows Language Pack Installer Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...
Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...
Windows Custom Protocol Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Custom Protocol Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. T...
Windows Speech Runtime Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...