Vendor
Microsoft
14,257 known vulnerabilities.
Products
508 results · Clear filters · Feed
-
Critical 9.9
Microsoft SharePoint Server Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Microsoft SQL Server Remote Code Execution Vulnerability
Heap-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.1
Aspire Security Feature Bypass Vulnerability
Missing authorization in Aspire allows an unauthorized attacker to bypass a security feature over a network.
-
Critical 9.8
Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability
Out-of-bounds write in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
-
Critical 9.6
Visual Studio Code Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Search Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Azure OpenAI Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure OpenAI allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.1
Microsoft Graph Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Graph allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Azure Managed Grafana Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.0
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows Kerberos Elevation of Privilege Vulnerability
Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.0
ASP.NET Core Elevation of Privilege Vulnerability
Incorrect authorization in ASP.NET Core allows an authorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows Xbox Live Networking Service Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Color Management Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
-
Critical 9.0
Windows Virtual Filtering Platform (VFP) Remote Code Execution Vulnerability
Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows iSCSI Remote Code Execution Vulnerability
Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Color Management Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft DirectMusic Remote Code Execution Vulnerability
Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft DirectMusic Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows DNS Remote Code Execution Vulnerability
Double free in Windows DNS allows an unauthorized attacker to execute code over a network.
-
Critical 9.0
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Critical 9.9
Azure DevOps Server Remote Code Execution Vulnerability
Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network.
-
Critical 9.8
Microsoft Xbox Remote Code Execution Vulnerability
Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network.
-
Critical 10.0
Entra Device Registration Elevation of Privilege Vulnerability
Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network.
-
Critical 10.0
Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker to elevate privileges over a network.
-
Critical 10.0
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unauthorized attacker to elevate privileges over a network.
-
Critical 10.0
AAD App Proxy Elevation of Privilege Vulnerability
Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.1
Azure Pipelines Remote Code Execution Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft QUIC Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Error Reporting Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Domain Name Service Remote Code Execution Vulnerability
Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Partition Management Driver Remote Code Execution Vulnerability
Out-of-bounds read in Windows Partition Management Driver allows an unauthorized attacker to execute code over a network.
-
Critical 9.0
Windows Schannel Spoofing Vulnerability
No cwe for this issue in Windows Schannel allows an unauthorized attacker to perform spoofing over a network.
-
Critical 9.8
Microsoft Windows Search Component Elevation of Privilege Vulnerability
Use after free in Microsoft Windows Search Component allows an unauthorized attacker to elevate privileges over a network.
-
Critical 9.8
Windows Text Shaping Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Text Shaping allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Network Policy Server (NPS) Remote Code Execution Vulnerability
Heap-based buffer overflow in Network Policy Server (NPS) allows an unauthorized attacker to execute code over a network.