28472 matches found
Microsoft Office Publisher Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network...
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Windows MIDI Service Module Elevation of Privileges Vulnerability
Time-of-check time-of-use toctou race condition in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...
Visual Studio Code Security Feature Bypass Vulnerability
Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
Windows USB Hub Driver Elevation of Privilege Vulnerability
Out-of-bounds read in Windows USB Hub Driver allows an unauthorized attacker to elevate privileges with a physical attack...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
.NET and Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
DirectWrite Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network...
Windows Services for NFS ONCRPC XDR Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Services for NFS ONCRPC XDR Driver allows an authorized attacker to elevate privileges locally...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
Active Directory Certificate Services (AD CS) Information Disclosure Vulnerability
Use of externally-controlled format string in Active Directory Certificate Services AD CS allows an authorized attacker to disclose information over a network...
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network...
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally...
.NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network...
Windows Hyper-V Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Hyper-V allows an unauthorized attacker to execute code over a network...
Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network...
Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
Untrusted pointer dereference in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
Microsoft Excel Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally...
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally...
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...
Windows USB Driver Elevation of Privilege Vulnerability
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally...
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...
Windows Spaceport.sys Information Disclosure Vulnerability
Out-of-bounds read in Windows Spaceport.sys allows an authorized attacker to disclose information locally...
Microsoft Failover Cluster Remote Code Execution Vulnerability
Untrusted pointer dereference in Windows Failover Cluster allows an unauthorized attacker to execute code over a network...
Windows Error Reporting Elevation of Privilege Vulnerability
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
secure cookie attribute bypass with tab
...
OpenSSL provider use-after-free
...
OpenSSL pinning bypass
...
domain-scoped PSL domain cookie
...
HTTP/2 server push UAF
...
OpenLDAP SASL authentication bypass
...
native CA store conn reuse
...
wolfSSL CA-cache hit overrides callback
...
Negotiate ambient user conn reuse
...
Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
...
Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
...
Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
...
Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
...
Qemu-kvm: heap off-by-one in kvm xen physdevop_map_pirq
...
xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content
...
xmldom: Quadratic-time attribute deduplication
...
xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization
...
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
...
NGINX ngx_http_js_module vulnerability
...