Vendor
Microsoft
14,257 known vulnerabilities.
Products
3,075 results · Clear filters · Feed
-
Medium 5.9
Microsoft Office Excel Information Disclosure Vulnerability
Improper control of generation of code ('code injection') in Microsoft Office Excel allows an authorized attacker to disclose information locally.
-
Medium 6.4
Azure DevOps Server Elevation of Privilege Vulnerability
Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.5
Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.
-
Medium 6.6
Microsoft Office Excel Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
.NET Security Feature Bypass Vulnerability
Not failing securely ('failing open') in .NET allows an unauthorized attacker to bypass a security feature over a network.
-
Medium 6.5
Windows DHCP Client Denial of Service Vulnerability
Missing release of memory after effective lifetime in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
-
Medium 6.5
Microsoft Exchange Server Spoofing Vulnerability
Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
Medium 6.8
HID Parser Library Elevation of Privilege Vulnerability
Out-of-bounds read in HID Parser Library allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Azure DevOps Server Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 5.3
Microsoft Office SharePoint Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 5.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Authorization bypass through user-controlled key in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
Medium 6.6
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Medium 6.1
Microsoft PowerShell Information Disclosure Vulnerability
Improper restriction of xml external entity reference in Microsoft PowerShell allows an unauthorized attacker to disclose information over a network.
-
Medium 5.3
Windows Hyper-V Spoofing Vulnerability
Improper access control in Windows Hyper-V allows an authorized attacker to perform spoofing locally.
-
Medium 5.9
Microsoft Configuration Manager Information Disclosure Vulnerability
Weak authentication in Microsoft Configuration Manager allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Dynamics 365 (on-premises) Information Disclosure Vulnerability
Improper restriction of xml external entity reference in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
-
Medium 5.5
Windows Network File System Information Disclosure Vulnerability
Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.
-
Medium 6.5
Windows Advanced Rasterization Platform Information Disclosure Vulnerability
Use of uninitialized resource in Windows Advanced Rasterization Platform allows an authorized attacker to disclose information locally.
-
Medium 5.9
Windows Deployment Services Information Disclosure Vulnerability
Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.
-
Medium 6.8
Windows Kernel Elevation of Privilege Vulnerability
Out-of-bounds read in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.6
Windows Smart Card Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Smart Card allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 5.5
Server for NFS Information Disclosure Vulnerability
Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.
-
Medium 6.6
Windows Telephony Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft WDAC OLE DB provider for SQL Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft WDAC OLE DB provider for SQL allows an unauthorized attacker to execute code over a network.
-
Medium 5.9
Reliable Multicast Transport Driver (RMCAST) Denial of Service Vulnerability
Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.
-
Medium 4.7
Windows WinHTTP Information Disclosure Vulnerability
Out-of-bounds read in Windows WinHTTP allows an authorized attacker to disclose information locally.