405,356 results · Feed
-
Medium 5.5
Windows Performance Counters Information Disclosure Vulnerability
Buffer over-read in Windows Performance Counters allows an authorized attacker to disclose information locally.
-
High 7.5
Windows DHCP Server Remote Code Execution Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows DHCP Server allows an authorized attacker to execute code over a network.
-
Critical 9.8
Windows DNS Remote Code Execution Vulnerability
Double free in Windows DNS allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Kerberos Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows Kerberos allows an unauthorized attacker to deny service over a network.
-
High 7.0
Microsoft Bluetooth Driver Elevation of Privilege Vulnerability
Use after free in Microsoft Bluetooth Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 8.1
Windows DNS Server Remote Code Execution Vulnerability
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Error Reporting Elevation of Privilege Vulnerability
Double free in Windows Error Reporting allows an authorized attacker to elevate privileges locally.
-
Unscored —
Issue summary: QUIC, when performing automated peer detection, may allow uninitialized stack data to leak into the rece…
-
High 8.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 7.4
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code locally.
-
High 7.5
Microsoft PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Remote Desktop Services Remote Code Execution Vulnerability
Use after free in Remote Desktop Gateway Service allows an authorized attacker to execute code locally.
-
Medium 5.9
Windows DNS Information Disclosure Vulnerability
Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.
-
Medium 6.3
Microsoft 365 Agents SDK Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.
-
High 7.5
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft MCP Gateway Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Elevation of Privilege Vulnerability
Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.0
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.
-
High 8.0
Azure CLI Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.
-
Medium 5.5
Microsoft Entra Private Network Connector Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose information locally.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 4.6
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
-
Critical 9.0
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 7.4
Microsoft.Data.SqlClient Information Disclosure Vulnerability
Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. T…
-
Medium 4.7
Windows NTFS Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows iSCSI Target Service Information Disclosure Vulnerability
Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.
-
High 8.8
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.1
ASP.NET Core Information Disclosure Vulnerability
Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.