Microsoft Exchange Server Remote Code Execution Vulnerability

...

Chromium: CVE-2023-4075 Use after free in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Win32k Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-2725 Use after free in Guest View

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Windows Clip Service Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-1816 Incorrect security UI in Picture In Picture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-1217 Stack buffer overflow in Crash reporting

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-0932 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows iSCSI Discovery Service Remote Code Execution Vulnerability

...

Azure Machine Learning Compute Instance Information Disclosure Vulnerability

...

3D Builder Remote Code Execution Vulnerability

...

Windows Cryptographic Information Disclosure Vulnerability

...

Windows Graphics Component Elevation of Privilege Vulnerability

...

Chromium: CVE-2022-3889 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability

...

Chromium: CVE-2022-3317 Insufficient validation of untrusted input in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Azure Site Recovery Elevation of Privilege Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

...

Remote Desktop Client Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Windows Print Spooler Elevation of Privilege Vulnerability

...

Microsoft Dynamics GP Remote Code Execution Vulnerability

...

Microsoft SharePoint Server Spoofing Vulnerability

...

Microsoft Office Visio Remote Code Execution Vulnerability

...

Windows Resilient File System (ReFS) Remote Code Execution Vulnerability

...

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

...

Microsoft Defender for IoT Remote Code Execution Vulnerability

...

Windows Feedback Hub Elevation of Privilege Vulnerability

...

Chromium: CVE-2021-37960 Inappropriate implementation in Blink graphics

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30629 Use after free in Permissions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30609 Use after free in Sign-In

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30602 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft SharePoint Server Spoofing Vulnerability

...

Chromium: CVE-2021-30531 Insufficient policy enforcement in Content Security Policy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Windows Installer Spoofing Vulnerability

...

Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability

...

Microsoft SharePoint Denial of Service Update

...

Windows Console Driver Denial of Service Vulnerability

...

Windows AppX Deployment Server Denial of Service Vulnerability

...

Windows Address Book Remote Code Execution Vulnerability

...

Microsoft SharePoint Information Disclosure Vulnerability

...

Windows Bluetooth Security Feature Bypass Vulnerability

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Microsoft Excel Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

Windows Language Pack Installer Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...