Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
Medium 5.9
ASP.NET Core Denial of Service Vulnerability
Improper handling of highly compressed data (data amplification) in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 8.8
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
-
Medium 6.8
Microsoft Teams for Android Information Disclosure Vulnerability
Insertion of sensitive information into sent data in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
-
Medium 6.8
Volume Shadow Copy Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Shadow Copy allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 5.0
Microsoft Office Word Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office Word allows an authorized attacker to disclose information locally.
-
Medium 6.5
Microsoft Office Excel Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office PowerPoint Information Disclosure Vulnerability
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 7.5
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
High 8.8
Windows Media Player Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Imaging Component Remote Code Execution Vulnerability
Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
High 8.2
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
-
Low 3.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.5
.NET Elevation of Privilege Vulnerability
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
-
Medium 6.5
.NET Information Disclosure Vulnerability
Origin validation error in .NET allows an unauthorized attacker to disclose information over a network.
-
High 8.8
.NET and Visual Studio Elevation of Privilege Vulnerability
Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Use after free in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 7.3
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an authorized attacker to execute code locally.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Buffer over-read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
High 8.8
Microsoft Office Access Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Low 3.5
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft Windows Media Foundation Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
-
High 7.5
Windows Deployment Services Remote Code Execution Vulnerability
Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows Storage Spaces Controller Elevation of Privilege Vulnerability
Use after free in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.5
Storage Spaces Controller Information Disclosure Vulnerability
Out-of-bounds read in Windows Storage Spaces Controller allows an authorized attacker to disclose information locally.
-
High 7.0
Windows Online Certificate Status Protocol (OCSP) Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Online Certificate Status Protocol (OCSP) allows an authorized attacker to elevate privileges locally.
-
Medium 5.8
Microsoft Teams for Android Information Disclosure Vulnerability
Origin validation error in Microsoft Teams for Android allows an authorized attacker to disclose information over a network.
-
High 7.0
Windows Work Folder Service Elevation of Privilege Vulnerability
Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.