405,289 results · Feed
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 7.0
Visual Studio Code Elevation of Privilege Vulnerability
Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.8
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
Medium 6.6
Microsoft Office Excel Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.
-
High 7.8
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
-
High 7.7
Azure Confidential Clean Rooms Tampering Vulnerability
Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.
-
High 8.8
Microsoft Defender Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.
-
High 7.3
Aspire Information Disclosure Vulnerability
Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally.
-
High 8.8
Visual Studio Code Security Feature Bypass Vulnerability
Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability
Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
-
Critical 9.6
Visual Studio Code Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Windows App Store Elevation of Privilege Vulnerability
Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows Search Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
Medium 6.8
.NET Security Feature Bypass Vulnerability
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.5
Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
-
High 7.5
Microsoft SQL Server Elevation of Privilege Vulnerability
Exposed dangerous method or function in SQL Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 7.1
Microsoft Exchange Server Spoofing Vulnerability
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.2
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Exchange Server Spoofing Vulnerability
Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
High 7.5
Microsoft Exchange Server Denial of Service Vulnerability
Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
-
High 8.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.