28424 matches found
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...
Windows GDI Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...
Microsoft Outlook Information Disclosure Vulnerability
An information disclosure vulnerability exists in the way that Microsoft Exchange Server parses email messages. The vulnerability could allow an attacker to discover confidential user information that is contained in Microsoft Outlook applications. To exploit the vulnerability, an attacker could...
Windows File System Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in the Windows kernel that could allow an attacker to exploit time of check time of use TOCTOU issues in file path-based checks from a low-integrity application. An attacker who successfully exploited this vulnerability could potentially modify files...
March 2016 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-15: CVE-2016-1096, CVE-2016-1097, CVE-2016-1098, CVE-2016-1099, CVE-2016-1100, CVE-2016-1101, CVE-2016-1102, CVE-2016-1103, CVE-2016-1104, CVE-2016-1105, CVE-2016-1106, CVE-2016-110...
April 2016 Adobe Flash Security Update
This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB16-10: CVE-2016-1006, CVE-2016-1011, CVE-2016-1012, CVE-2016-1013, CVE-2016-1014, CVE-2016-1015, CVE-2016-1016, CVE-2016-1017, CVE-2016-1018, and CVE-2016-1019...
Microsoft Edge Memory Corruption Vulnerability
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...
GNU Binutils Eh Frame elf-eh-frame.c _bfd_elf_eh_frame_section_offset null pointer dereference
...
Out-of-zone database nodes can become authoritative zone cuts
...
Chromium CVE-2026-87560: Missing authorization in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium CVE-2026-87556: Missing authorization in Browser
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Remote Desktop Client Remote Code Execution Vulnerability
Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network...
Visual Studio Code Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...
.NET Remote Code Execution Vulnerability
...
Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str
...
Microsoft SQL Server Native Scoring Information Disclosure Vulnerability
...
Windows Kernel-Mode Driver Elevation of Privilege Vulnerability
...
Azure CycleCloud Remote Code Execution Vulnerability
...
Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability
...
.NET and Visual Studio Remote Code Execution Vulnerability
...
Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
...
Windows Cryptographic Services Information Disclosure Vulnerability
...
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
...
Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability
...
Windows DNS Client Denial of Service Vulnerability
...
Azure DevOps Server Spoofing Vulnerability
...
Chromium: CVE-2023-6351 Use after free in libavif
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Deployment Services Denial of Service Vulnerability
...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Chromium: CVE-2023-5346 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-4764 Incorrect security UI in BFCache
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
AMD: CVE-2023-20569 Return Address Predictor
...
Microsoft Teams Remote Code Execution Vulnerability
...
Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
...
Windows Cryptographic Services Information Disclosure Vulnerability
...
Chromium: CVE-2023-4069 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-4068 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-3740 Insufficient validation of untrusted input in Themes
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Geolocation Service Remote Code Execution Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Chromium: CVE-2023-2935 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Win32k Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Windows Secure Channel Denial of Service Vulnerability
...
Chromium:CVE-2023-0134: Use after free in Cart
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...