405,382 results · Feed
-
Medium 6.3
Microsoft 365 Agents SDK Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft 365 Agents SDK allows an authorized attacker to disclose information over a network.
-
High 7.5
Microsoft Office Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft MCP Gateway Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Microsoft MCP Gateway allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Elevation of Privilege Vulnerability
Cross-site request forgery (csrf) in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.0
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over an adjacent network.
-
High 8.0
Azure CLI Remote Code Execution Vulnerability
Improper neutralization of special elements used in an os command ('os command injection') in Azure CLI allows an authorized attacker to execute code over a network.
-
Medium 5.5
Microsoft Entra Private Network Connector Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Entra Private Network Connector allows an authorized attacker to disclose information locally.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 4.6
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 7.0
Windows Projected File System Filter Driver Elevation of Privilege Vulnerability
Use after free in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.
-
Critical 9.0
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
High 7.4
Microsoft.Data.SqlClient Information Disclosure Vulnerability
Authentication bypass by capture-replay in SQL Server allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows NTFS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. T…
-
Medium 4.7
Windows NTFS Tampering Vulnerability
Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an authorized attacker to perform tampering locally.
-
High 7.8
Windows Local Security Authority Subsystem Service (LSASS) Elevation of Privilege Vulnerability
Use after free in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows iSCSI Target Service Information Disclosure Vulnerability
Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.
-
High 8.8
SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.
-
High 8.0
Microsoft SQL Server Elevation of Privilege Vulnerability
Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.1
ASP.NET Core Information Disclosure Vulnerability
Improper encoding or escaping of output in ASP.NET Core allows an unauthorized attacker to disclose information over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Stack-based buffer overflow in .NET allows an unauthorized attacker to deny service over a network.
-
Medium 6.5
Windows Remote Desktop Client Information Disclosure Vulnerability
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
-
High 7.0
Azure Local Elevation of Privilege Vulnerability
Incorrect permission assignment for critical resource in Azure Local allows an authorized attacker to elevate privileges locally.
-
Medium 5.3
Windows Layer-2 Bridge Network Driver Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows Layer-2 Bridge Network Driver allows an unauthorized attacker to deny service over an adjacent network.
-
High 8.4
Azure CycleCloud Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an os command ('os command injection') in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
-
Medium 4.4
Azure Firmware Security Feature Bypass Vulnerability
Improper check for certificate revocation in Azure Firmware allows an authorized attacker to bypass a security feature locally.
-
High 8.8
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
High 8.6
Visual Studio Code Security Feature Bypass Vulnerability
Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
-
Medium 5.5
AMD Zen Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
-
Medium 5.5
AMD Zen Information Disclosure Vulnerability
Processor optimization removal or modification of security-critical code in AMD Zen allows an authorized attacker to disclose information locally.
-
High 7.8
Windows Kernel Elevation of Privilege Vulnerability
Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
-
High 7.0
RPC Runtime Elevation of Privilege Vulnerability
Use after free in RPC Runtime allows an authorized attacker to elevate privileges locally.
-
High 8.8
Windows Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
-
Medium 5.5
Microsoft Raw Image Extension Information Disclosure Vulnerability
Buffer over-read in Windows Raw Image Extension allows an unauthorized attacker to disclose information locally.
-
High 7.8
HEVC Video Extensions Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Codecs Library allows an unauthorized attacker to execute code locally.