23105 matches found
Microsoft Cryptographic Services Elevation of Privilege Vulnerability
...
Windows Mobile Device Management Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
SymCrypt Denial of Service Vulnerability
...
Chromium: CVE-2021-4057 Use after free in file API
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-38018 Inappropriate implementation in navigation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-38012 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-38006 Use after free in storage foundation
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Hyper-V Discrete Device Assignment (DDA) Denial of Service Vulnerability
...
Chromium: CVE-2021-37996 Insufficient validation of untrusted input in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Fast FAT File System Driver Information Disclosure Vulnerability
...
Windows MSHTML Platform Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
...
Windows Text Shaping Remote Code Execution Vulnerability
...
Chromium: CVE-2021-37980 Inappropriate implementation in Sandbox
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-37977 Use after free in Garbage Collection
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft SharePoint Server Spoofing Vulnerability
...
Chromium: CVE-2021-30607 Use after free in Permissions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Event Tracing Elevation of Privilege Vulnerability
...
Storage Spaces Controller Elevation of Privilege Vulnerability
...
Storage Spaces Controller Elevation of Privilege Vulnerability
...
Win32k Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30538 Insufficient policy enforcement in content security policy
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2021-30516 Heap buffer overflow in History
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
NTFS Elevation of Privilege Vulnerability
...
Windows Media Video Decoder Remote Code Execution Vulnerability
...
Windows Hyper-V Elevation of Privilege Vulnerability
...
Windows Hyper-V Denial of Service Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
...
Windows WalletService Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Chromium CVE-2021-21168: Insufficient policy enforcement in appcache
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Azure IoT CLI extension Elevation of Privilege Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows Event Logging Service Elevation of Privilege Vulnerability
...
Azure Active Directory Pod Identity Spoofing Vulnerability
...
Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability
...
Microsoft Office Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Windows Backup Engine Elevation of Privilege Vulnerability
...
Azure Sphere Elevation of Privilege Vulnerability
...
Microsoft Office Online Spoofing Vulnerability
...
Windows Graphics Component Information Disclosure Vulnerability
...
Azure Sphere Denial of Service Vulnerability
...
Microsoft SharePoint Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft SharePoint Server improperly discloses its folder structure when rendering specific web pages. An attacker who took advantage of this information disclosure could view the folder path of scripts loaded on the page. To take advantage of...
Windows Text Services Framework Information Disclosure Vulnerability
An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow a...
Microsoft SharePoint Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SharePoint application pool and the SharePoint...
Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the...
Microsoft Dynamics 365 (on-premises) Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises when the server fails to properly sanitize web requests to an affected Dynamics server. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the SQL service account. A...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...