21621 matches found
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Defender Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted command that could exploit the...
PowerShell Elevation of Privilege Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-21230 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Clustered Shared Volume Information Disclosure Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Edge for IOS and Android Spoofing Vulnerability
...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Windows Server Service Information Disclosure Vulnerability
...
Chromium: CVE-2023-2941 Inappropriate implementation in Extensions API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Business Central Information Disclosure Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Remote Desktop Protocol Remote Code Execution Vulnerability
...
Microsoft Guidance to mitigate L1TF variant
Executive Summary On January 3, 2018, Microsoft released an advisory and security updates for a new class of hardware vulnerabilities involving speculative execution side channels known as Spectre and Meltdown. Microsoft is aware of a new speculative execution side channel vulnerability known as ...
Azure Site Recovery Remote Code Execution Vulnerability
...
Windows Filter Manager Elevation of Privilege Vulnerability
...
Microsoft Jet Red Database Engine and Access Connectivity Engine Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Windows Point-to-Point Protocol (PPP) Remote Code Execution Vulnerability
...
Windows DNS Server Remote Code Execution Vulnerability
...
Win32 Stream Enumeration Remote Code Execution Vulnerability
...
Azure Site Recovery Remote Code Execution Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Visual Studio Tools for Office Runtime Spoofing Vulnerability
...
Electron: CVE-2023-39956 -Visual Studio Code Remote Code Execution Vulnerability
...
Microsoft Excel Security Feature Bypass Vulnerability
...
Windows Kerberos Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Microsoft Guidance for Enabling Request Smuggling Filter on IIS Servers
Executive Summary Microsoft is aware of a tampering vulnerability in the way that HTTP proxies front-end and web servers back-end that do not strictly adhere to RFC standards handle sequences of HTTP requests received from multiple sources. An attacker who successfully exploited the vulnerability...
Microsoft Guidance for Disabling SMBv3 Compression
Important March 12, 2020 - Microsoft has released CVE-2020-0796 | Windows SMBv3 Client/Server Remote Code Execution Vulnerability to address this vulnerability. For more information about this issue, including download links for an available security update, please review CVE-2020-0796. Microsoft...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
...
Windows Cluster Shared Volume (CSV) Denial of Service Vulnerability
...
Windows SMB Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 SMBv1 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...
Chromium: CVE-2023-4428: Out of bounds memory access in CSS
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Microsoft Defender Remote Code Execution Vulnerability
...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Intel: CVE-2022-21123 Shared Buffers Data Read (SBDR)
...
Windows DNS Server Remote Code Execution Vulnerability
...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Windows TCP/IP Remote Code Execution Vulnerability
...
Azure Site Recovery Elevation of Privilege Vulnerability
...
Microsoft Exchange Server Information Disclosure Vulnerability
...
Windows Fax Service Elevation of Privilege Vulnerability
...
Windows Network File System Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...