Lucene search
+L
MscveMost viewed

23108 matches found

Microsoft CVE
Microsoft CVE
•added 2019/04/09 7:0 a.m.•42 views

Azure DevOps Server Cross-site Scripting Vulnerability

A Cross-site Scripting XSS vulnerability exists when Azure DevOps Server does not properly sanitize user provided input. An authenticated attacker could exploit the vulnerability by sending a specially crafted payload to the Team Foundation Server, which will get executed in the context of the us...

6.1CVSS2AI score0.01983EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2019/04/09 7:0 a.m.•42 views

Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files. To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded. The update...

7.8CVSS3.4AI score0.18515EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2019/04/09 7:0 a.m.•42 views

Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view, change...

7.8CVSS2.9AI score0.04352EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2019/03/12 7:0 a.m.•42 views

Windows VBScript Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.6CVSS8.1AI score0.08261EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2019/03/12 7:0 a.m.•42 views

Internet Explorer Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Internet Explorer fails to validate the correct Security Zone of requests for specific URLs. This could allow an attacker to cause a user to access a URL in a less restricted Internet Security Zone than intended. To exploit this vulnerability, a...

6.5CVSS2.4AI score0.03854EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2019/01/08 8:0 a.m.•42 views

ASP.NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A...

7.5CVSS3.3AI score0.08386EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/12/11 8:0 a.m.•42 views

Windows Kernel Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create ne...

7.8CVSS3.3AI score0.04196EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/09/11 7:0 a.m.•42 views

Windows SMB Denial of Service Vulnerability

A denial of service vulnerability exists in the Microsoft Server Block Message SMB when an attacker sends specially crafted requests to the server. An attacker who exploited this vulnerability could cause the affected system to crash. To attempt to exploit this issue, an attacker would need to se...

7.8CVSS1.8AI score0.08997EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/08/14 7:0 a.m.•42 views

Windows GDI Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. There are multiple ways an attacker could explo...

6.5CVSS1.8AI score0.07979EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/07/10 7:0 a.m.•42 views

.NET Framework Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level. To exploit the vulnerability, an attacker would first have to access the local machine, and then run a malicious program. The update addresses the vulnerability by...

7.8CVSS4.9AI score0.01218EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/06/12 7:0 a.m.•42 views

Windows DNSAPI Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. To exploit the vulnerability, the...

9.3CVSS7.1AI score0.22257EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/05/15 7:0 a.m.•42 views

Microsoft PowerPoint Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.7AI score0.2208EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/05/08 7:0 a.m.•42 views

Windows Image Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a...

7CVSS3.5AI score0.01042EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/04/10 7:0 a.m.•42 views

Microsoft Wireless Keyboard 850 Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in the Microsoft Wireless Keyboard 850 which could allow an attacker to reuse an AES encryption key to send keystrokes to other keyboard devices or to read keystrokes sent by other keyboards for the affected devices. An attacker would first have to...

7.3CVSS2.3AI score0.01224EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/03/13 7:0 a.m.•42 views

Windows Desktop Bridge VFS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Desktop Bridge VFS does not take into acccount user/kernel mode when managing file paths. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs;...

7.8CVSS3.1AI score0.0341EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2018/02/13 8:0 a.m.•42 views

Windows AppContainer Elevation Of Privilege Vulnerability

An elevation of privilege vulnerability exists when AppContainer improperly implements constrained impersonation. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the syste...

7CVSS5AI score0.02344EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
•added 2018/01/09 8:0 a.m.•42 views

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS7.7AI score0.23877EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2018/01/03 8:0 a.m.•42 views

Microsoft Color Management Information Disclosure Vulnerability

An information disclosure vulnerability exists in the way that the Color Management Module ICM32.dll handles objects in memory. This vulnerability allows an attacker to retrieve information to bypass usermode ASLR Address Space Layout Randomization on a targeted system. By itself, the information...

5.5CVSS3.8AI score0.07226EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/12/12 8:0 a.m.•42 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.5AI score0.62646EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
•added 2017/09/12 7:0 a.m.•42 views

Windows GDI+ Information Disclosure Vulnerability

A information disclosure vulnerability exists when the Windows GDI+ component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would...

5.5CVSS1.7AI score0.03044EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2017/08/08 7:0 a.m.•42 views

Windows NetBIOS Denial of Service Vulnerability

A denial of service vulnerability exists when Microsoft Windows improperly handles NetBIOS packets. An attacker who successfully exploited this vulnerability could cause a target computer to become completely unresponsive. A remote unauthenticated attacker could exploit this vulnerability by...

6.5CVSS3.2AI score0.0258EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/19 7:0 a.m.•42 views

Microsoft Graphics Component Elevation of Privilege Vulnerability

An Elevation of Privilege vulnerability exists when the Windows Graphics component improperly initializes contents in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; o...

7CVSS4.1AI score0.14265EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•42 views

Win32k Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...

9.3CVSS6.9AI score0.19023EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2017/06/13 7:0 a.m.•42 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...

6.5CVSS3.1AI score0.14265EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
•added 2017/03/14 7:0 a.m.•42 views

Hyper-V vSMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB packet data. An attacker who successfully exploited these vulnerabilities could execute arbitrary code on a target operating system. To exploit these vulnerabilities, an attacker...

9CVSS4.5AI score0.01707EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/08/09 7:0 a.m.•42 views

Windows PDF Remote Code Execution Vulnerability

A remote code execution vulnerability exists when Microsoft Windows PDF Library improperly handles objects in memory. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

9.3CVSS3.5AI score0.18537EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2016/08/09 7:0 a.m.•42 views

NetLogon Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Netlogon improperly establishes a secure communications channel to a domain controller. An attacker who successfully exploited the vulnerability could run a specially crafted application on a domain-joined system. To exploit the...

7.8CVSS3AI score0.01308EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/06/14 7:0 a.m.•42 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

7.6CVSS7.6AI score0.17401EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2016/06/14 7:0 a.m.•42 views

Windows DNS Server Use After Free Vulnerability

A remote code execution vulnerability exists in Windows Domain Name System DNS servers when they fail to properly handle requests. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the Local System Account. Windows servers that are configured as D...

10CVSS9.6AI score0.25462EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/04/08 7:0 a.m.•41 views

Microsoft Excel Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

7.8CVSS7.8AI score0.01035EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/03/31 7:0 a.m.•41 views

Azure Playwright Elevation of Privilege Vulnerability

Improper authorization in Azure Playwright allows an unauthorized attacker to elevate privileges over a network...

9.8CVSS6.9AI score0.00638EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/01/14 8:0 a.m.•41 views

MapUrlToZone Security Feature Bypass Vulnerability

...

8.8CVSS7.1AI score0.01445EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/11/12 8:0 a.m.•41 views

Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

7.8CVSS7.1AI score0.00564EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/11/12 8:0 a.m.•41 views

SQL Server Native Client Remote Code Execution Vulnerability

...

8.8CVSS7.1AI score0.01432EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:0 a.m.•41 views

Microsoft Excel Remote Code Execution Vulnerability

...

7.8CVSS7.1AI score0.06367EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:0 a.m.•41 views

Windows Remote Desktop Services Tampering Vulnerability

...

7.4CVSS7.1AI score0.00745EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/10/08 7:0 a.m.•41 views

Windows Scripting Engine Security Feature Bypass Vulnerability

...

8.4CVSS7.3AI score0.00538EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/09/19 7:0 a.m.•41 views

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

8.8CVSS8.8AI score0.00472EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2024/09/10 7:0 a.m.•41 views

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

9.8CVSS8.2AI score0.01486EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/07/09 7:0 a.m.•41 views

Windows Hyper-V Elevation of Privilege Vulnerability

...

7.8CVSS7.7AI score0.07058EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/06/13 2:0 p.m.•41 views

Chromium: CVE-2024-5847 Use after free in PDFium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00464EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/06/11 2:0 p.m.•41 views

Windows Kernel Elevation of Privilege Vulnerability

...

8.8CVSS7.1AI score0.00791EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/06/11 2:0 p.m.•41 views

Microsoft Office Remote Code Execution Vulnerability

...

7.5CVSS7.1AI score0.01768EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/06/11 2:0 p.m.•41 views

Microsoft Office Remote Code Execution Vulnerability

...

7.8CVSS7.1AI score0.01527EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
•added 2024/05/16 7:0 a.m.•41 views

Chromium: CVE-2024-4947 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2024-4947 exists in the wild...

9.6CVSS9.1AI score0.15111EPSS
SaveExploits2
Microsoft CVE
Microsoft CVE
•added 2024/05/14 7:0 a.m.•41 views

Win32k Elevation of Privilege Vulnerability

...

7.8CVSS7.7AI score0.00711EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/04/09 7:0 a.m.•41 views

Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability

...

9CVSS7.3AI score0.1802EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/04/09 7:0 a.m.•41 views

Windows CSC Service Elevation of Privilege Vulnerability

...

7.8CVSS7.3AI score0.09375EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
•added 2024/03/22 7:0 a.m.•41 views

Chromium: CVE-2024-2628 Inappropriate implementation in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6AI score0.0059EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2024/03/22 7:0 a.m.•41 views

Chromium: CVE-2024-2625 Object lifecycle issue in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.18277EPSS
SaveExploits0
Total number of security vulnerabilities5000