Lucene search
+L
MscveMost viewed

23108 matches found

Microsoft CVE
Microsoft CVE
added 2019/07/09 7:0 a.m.39 views

Microsoft Office Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents. An attacker who successfully exploited this vulnerability could read or write information in Office documents. The security update addresses the...

9.1CVSS1.7AI score0.0424EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/07/09 7:0 a.m.39 views

Remote Desktop Services Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection. An attacker who successfully exploited this vulnerability could execute arbitrary code on the victim system. An attacker cou...

8.5CVSS2.8AI score0.70966EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/07/09 7:0 a.m.39 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

5.5CVSS1.9AI score0.02646EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/06/11 7:0 a.m.39 views

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Edge that allows for bypassing Mark of the Web Tagging MOTW. Failing to set the MOTW means that a large number of Microsoft security technologies are bypassed. In a web-based attack scenario, an attacker could host a malicious website that is...

5.1CVSS1AI score0.01604EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/06/11 7:0 a.m.39 views

Microsoft Speech API Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Speech API SAPI improperly handles text-to-speech TTS input. The vulnerability could corrupt memory in a way that enables an attacker to execute arbitrary code in the context of the current user. To exploit the vulnerability, an...

7.8CVSS2.7AI score0.03524EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:0 a.m.39 views

.NET Framework Denial of Service Vulnerability

A denial of service vulnerability exists when .NET Framework improperly handles objects in heap memory. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. To exploit this vulnerability, an attacker would have to log on to an...

5.5CVSS2.3AI score0.0135EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/05/14 7:0 a.m.39 views

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

8.8CVSS1.2AI score0.03316EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/03/12 7:0 a.m.39 views

Windows Hyper-V Information Disclosure Vulnerability

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authenticated user on a guest operating system. To exploit the vulnerability, an attacker on a guest operating system could run a specially crafted application...

6.8CVSS1.9AI score0.019EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/02/12 8:0 a.m.39 views

February 2019 Oracle Outside In Library Security Update

Microsoft Exchange Server contains some elements of the Oracle Outside In libraries. The February 12, 2019 releases of Microsoft Exchange Server contain fixes to vulnerabilities which are described in: Oracle Critical Patch Update Advisory - October 2018 The following software releases include...

7.2AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/02/12 8:0 a.m.39 views

Microsoft Office Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs. An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials. An attacker who successfully exploited this vulnerability could perform a phishing attack...

5.5CVSS2.6AI score0.12783EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/02/12 8:0 a.m.39 views

Windows SMB Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 SMBv2 server handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server. To exploit the vulnerability, in most...

9CVSS3.4AI score0.13039EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/02/12 8:0 a.m.39 views

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

8.8CVSS1.2AI score0.03861EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2019/01/08 8:0 a.m.39 views

Microsoft Office SharePoint XSS Vulnerability

A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS0.9AI score0.01639EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Internet Explorer Memory Corruption Vulnerability

A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

7.6CVSS1.5AI score0.69214EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values. An attacker who successfully exploited this vulnerability could deny dependent security feature functionality. To exploit this vulnerability, an attacker would...

5.5CVSS3.2AI score0.01424EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Windows Kernel Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. An authenticated attacker could exploit this vulnerability by...

5.5CVSS1.9AI score0.01835EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Chakra Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

7.6CVSS1.4AI score0.10886EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Microsoft Exchange Server Tampering Vulnerability

A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data. An attacker who successfully exploited this vulnerability could modify a targeted user's profile data. To exploit the vulnerability, an attacker would need to be authenticated on an affected...

4.3CVSS2AI score0.02409EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Microsoft SharePoint Information Disclosure Vulnerability

An information disclosure vulnerability exists where certain modes of the search function in Microsoft SharePoint Server are vulnerable to cross-site search attacks a variant of cross-site request forgery, CSRF. When users are simultaneously logged in to Microsoft SharePoint Server and visit a...

4.3CVSS1.5AI score0.04155EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/12/11 8:0 a.m.39 views

Windows Remote Procedure Call Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows Remote Procedure Call RPC runtime improperly initializes objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an...

5.5CVSS3.7AI score0.01889EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/11/13 8:0 a.m.39 views

Windows COM Elevation of Privilege Vulnerability

An elevation of privilege exists in Windows COM Aggregate Marshaler. An attacker who successfully exploited the vulnerability could run arbitrary code with elevated privileges. To exploit the vulnerability, an attacker could run a specially crafted application that could exploit the vulnerability...

7.8CVSS5.6AI score0.03295EPSS
SaveExploits4
Microsoft CVE
Microsoft CVE
added 2018/11/13 8:0 a.m.39 views

Windows ALPC Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view...

7.8CVSS3AI score0.02696EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
added 2018/10/09 7:0 a.m.39 views

Microsoft Filter Manager Elevation Of Privilege Vulnerability

An Elevation of Privilege vulnerability exists in Filter Manager when it improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute elevated code and take control of an affected system. An attacker could then install programs; view, change, or...

7CVSS2.3AI score0.01801EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/09/11 7:0 a.m.39 views

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

5.4CVSS1.2AI score0.02253EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/08/14 7:0 a.m.39 views

Windows NDIS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it. To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...

7.8CVSS2.7AI score0.01193EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/08/14 7:0 a.m.39 views

GDI+ Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in the memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or dele...

9.3CVSS7.3AI score0.67874EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/07/10 7:0 a.m.39 views

July 2018 Adobe Flash Security Update

This security update addresses the following vulnerabilities, which are described in Adobe Security Bulletin APSB18-24: CVE-2018-5007, CVE-2018-5008...

8.8CVSS8.2AI score0.18002EPSS
SaveExploits1
Microsoft CVE
Microsoft CVE
added 2018/07/10 7:0 a.m.39 views

Microsoft SharePoint Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...

8.8CVSS2.9AI score0.12755EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/06/12 7:0 a.m.39 views

Device Guard Code Integrity Policy Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...

5.3CVSS3.6AI score0.01976EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/06/12 7:0 a.m.39 views

Cortana Elevation of Privilege Vulnerability

An Elevation of Privilege vulnerability exists when Cortana retrieves data from user input services without consideration for status. An attacker who successfully exploited the vulnerability could execute commands with elevated permissions. To exploit the vulnerability, an attacker would require...

6.8CVSS4.2AI score0.01643EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/05/08 7:0 a.m.39 views

.NET and .NET Core Denial of Service Vulnerability

A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET application. A remote unauthenticated attacker could exploit this vulnerability by issuing...

7.5CVSS3.4AI score0.08212EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/05/08 7:0 a.m.39 views

Microsoft Exchange Spoofing Vulnerability

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web App OWA fails to properly handle web requests. An attacker who successfully exploited the vulnerability could perform script or content injection attacks, and attempt to trick the user into disclosing sensitive...

5.8CVSS1.2AI score0.03481EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/05/08 7:0 a.m.39 views

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...

5.8CVSS1.6AI score0.0355EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/03/13 7:0 a.m.39 views

Microsoft Video Control Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Microsoft Video Control mishandles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in system mode. An attacker could then install programs; view, change, or delete data; or...

7CVSS3.1AI score0.01129EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/02/13 8:0 a.m.39 views

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

9.3CVSS2.5AI score0.15101EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/02/13 8:0 a.m.39 views

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the Office software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on wit...

9.3CVSS2.6AI score0.19536EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/01/09 8:0 a.m.39 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Offiice parses specially crafted email messages. An attacker who successfully exploited the vulnerability could take control of an affected system. An attacker could then install programs; view, change, or delete data; or crea...

9.3CVSS4.1AI score0.2057EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2018/01/09 8:0 a.m.39 views

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS8.3AI score0.24398EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/12/12 8:0 a.m.39 views

Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack scenario, an...

5.3CVSS1.3AI score0.25116EPSS
SaveExploits5
Microsoft CVE
Microsoft CVE
added 2017/12/07 8:0 a.m.39 views

Microsoft Malware Protection Engine Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...

9.3CVSS2.2AI score0.19759EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/11/14 8:0 a.m.39 views

Internet Explorer Information Disclosure Vulnerability

An information disclosure vulnerability exists when Internet Explorer improperly handles page content, which could allow an attacker to detect the navigation of the user leaving a maliciously crafted page. To exploit the vulnerability, in a web-based attack scenario, an attacker could host a...

4.3CVSS1.5AI score0.07046EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/10/10 7:0 a.m.39 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.6AI score0.81454EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
added 2017/09/12 7:0 a.m.39 views

Win32k Graphics Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete dat...

9.3CVSS6.9AI score0.49765EPSS
SaveExploits3
Microsoft CVE
Microsoft CVE
added 2017/09/12 7:0 a.m.39 views

Microsoft Edge Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists in Microsoft Edge when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents. An attacker who exploited the bypass could trick a user into loading a page containing malicious content. To exploit the bypas...

4.3CVSS5.7AI score0.04314EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/08/08 7:0 a.m.39 views

Express Compressed Fonts Remote Code Execution Vulnerability

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploits exploited this vulnerability would gain code execution on the target system. Users whose accounts are configured to have fewer user...

9.3CVSS8.7AI score0.19765EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/08/08 7:0 a.m.39 views

Microsoft Browser Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

7.6CVSS3.9AI score0.09181EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/08/08 7:0 a.m.39 views

Win32k Information Disclosure Vulnerability

An information disclosure vulnerability exists when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would have to log ...

7CVSS1.4AI score0.02322EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/07/11 7:0 a.m.39 views

Microsoft Office Memory Corruption Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...

9.3CVSS2.6AI score0.23138EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/07/11 7:0 a.m.39 views

Microsoft Office Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could use a specially crafted file to perform actions in the security context of the current user. For example, th...

9.3CVSS1.9AI score0.21469EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2017/07/11 7:0 a.m.39 views

Windows System Information Console Information Disclosure Vulnerability

An information disclosure vulnerability exists in the Microsoft Common Console Document .msc when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity XXE...

5.5CVSS4.5AI score0.01541EPSS
SaveExploits0
Total number of security vulnerabilities5000