24507 matches found
Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability
...
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
...
Chromium: CVE-2021-4101 Heap buffer overflow in Swiftshader
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Defender for IoT Remote Code Execution Vulnerability
...
Microsoft Office Trust Center Spoofing Vulnerability
...
Bot Framework SDK Remote Code Execution Vulnerability
...
Chromium: CVE-2021-38008 Use after free in media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge for iOS Spoofing Vulnerability
...
Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability
...
FSLogix Information Disclosure Vulnerability
...
Remote Desktop Protocol Client Information Disclosure Vulnerability
...
Chromium: CVE-2021-37964 Inappropriate implementation in ChromeOS Networking
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30609 Use after free in Sign-In
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30606 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30560 Use after free in Blink XSLT
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows LSA Denial of Service Vulnerability
...
Windows GDI Information Disclosure Vulnerability
...
Chromium: CVE-2021-30550 Use after free in Accessibility
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Microsoft Excel Information Disclosure Vulnerability
...
Windows Console Driver Denial of Service Vulnerability
...
Windows AppX Deployment Server Denial of Service Vulnerability
...
Windows Installer Spoofing Vulnerability
...
Application Virtualization Remote Code Execution Vulnerability
...
Windows DirectX Information Disclosure Vulnerability
...
Windows Address Book Remote Code Execution Vulnerability
...
Windows Bluetooth Security Feature Bypass Vulnerability
Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the...
Windows Remote Access Elevation of Privilege Vulnerability
...
Windows WalletService Elevation of Privilege Vulnerability
...
Windows Kernel Elevation of Privilege Vulnerability
...
Microsoft Excel Remote Code Execution Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
Windows Update Orchestrator Service Elevation of Privilege Vulnerability
...
Windows iSCSI Target Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...
Microsoft Office Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Windows Error Reporting Manager Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who successfully exploited this vulnerability could delete a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have...
Visual Studio Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Visual Studio when it improperly handles objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with administrative user rights, an...
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would...
Projected Filesystem Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploited this vulnerability could delete a targeted file they would not have permissions to. To exploit this vulnerability, an attacker would firs...
Windows Common Log File System Driver Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Common Log File System CLFS driver improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have...
Microsoft COM for Windows Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the way that Microsoft COM for Windows handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted...
Windows Custom Protocol Engine Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Custom Protocol Engine improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. T...
Windows Speech Runtime Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Speech Runtime improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...
Microsoft Office Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special...
Windows WalletService Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...
Windows Push Notification Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could then install programs; view, change or delete data. To...
Visual Studio Code ESLint Extension Remote Code Execution Vulnerability
A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a project. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on...
Microsoft SharePoint Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint server. The...