23105 matches found
Visual Studio Code Remote Code Execution Vulnerability
...
VP9 Video Extensions Information Disclosure Vulnerability
...
Windows NTFS Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-4066 Integer underflow in ANGLE
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-38007 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure RTOS Information Disclosure Vulnerability
...
Visual Studio Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
...
Chromium: CVE-2021-37995 Inappropriate implementation in WebApp Installer
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows AD FS Security Feature Bypass Vulnerability
...
Windows AppX Deployment Service Elevation of Privilege Vulnerability
...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
Chromium: CVE-2021-37963 Side-channel information leakage in DevTools
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability
...
Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30616 Use after free in Media
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Edge for Android Information Disclosure Vulnerability
...
Windows Event Tracing Elevation of Privilege Vulnerability
...
Windows Installer Elevation of Privilege Vulnerability
...
Windows Key Distribution Center Information Disclosure Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
GDI+ Information Disclosure Vulnerability
...
Windows Kernel Information Disclosure Vulnerability
...
Raw Image Extension Remote Code Execution Vulnerability
...
Remote Procedure Call Runtime Remote Code Execution Vulnerability
...
Windows GDI+ Remote Code Execution Vulnerability
...
Windows UPnP Device Host Elevation of Privilege Vulnerability
...
Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability
...
Chromium CVE-2021-21184: Inappropriate implementation in performance APIs
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows CSC Service Elevation of Privilege Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Windows Client Side Rendering Print Provider Elevation of Privilege Vulnerability
...
Azure Sphere Elevation of Privilege Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
Windows Remote Access Elevation of Privilege Vulnerability
...
Microsoft Excel Security Feature Bypass Vulnerability
...
Microsoft Office Online Spoofing Vulnerability
...
Windows USO Core Worker Elevation of Privilege Vulnerability
...
Windows Update Stack Elevation of Privilege Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Microsoft Office Click-to-Run Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run C2R AppVLP handles certain files. An attacker who successfully exploited the vulnerability could elevate privileges. To exploit this vulnerability, an attacker would need to convince a user to open a...
Microsoft SharePoint Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...
Windows Backup Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...
Windows Event System Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Event System improperly handles objects in memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...
Group Policy Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Group Policy improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a...
Microsoft Office SharePoint XSS Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles file operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context. An attacker could exploit this vulnerability by running a specially...