Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 8.8
Remote Desktop Client Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Graphics Component Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
-
High 7.4
Visual Studio Code Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.7
Azure CycleCloud Information Disclosure Vulnerability
Insufficiently protected credentials in Azure CycleCloud allows an authorized attacker to disclose information over a network.
-
High 8.8
Visual Studio Remote Code Execution Vulnerability
Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network.
-
High 7.8
Windows Volume Manager Extension Driver Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges locally.
-
High 7.0
Windows Security Center Elevation of Privilege Vulnerability
Use after free in Windows Security Center allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Windows Remote Desktop Client Denial of Service Vulnerability
Integer overflow or wraparound in Remote Desktop Client allows an unauthorized attacker to deny service over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.0
Windows Installer Elevation of Privilege Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
Medium 6.8
Windows Boot Manager Elevation of Privilege Vulnerability
No cwe for this issue in Windows Boot Manager allows an unauthorized attacker to elevate privileges with a physical attack.
-
Medium 6.4
Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 8.1
Windows DNS Server Remote Code Execution Vulnerability
Use after free in DNS Server allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Double free in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
Medium 6.4
Windows DHCP Server Remote Code Execution Vulnerability
Out-of-bounds read in Windows DHCP Server allows an authorized attacker to execute code locally.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 8.4
Windows NTFS Elevation of Privilege Vulnerability
Out-of-bounds read in Windows NTFS allows an unauthorized attacker to elevate privileges locally.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.8
Windows Device Association Service Elevation of Privilege Vulnerability
Release of invalid pointer or reference in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.5
Windows DHCP Server Denial of Service Vulnerability
Access of resource using incompatible type ('type confusion') in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
Critical 9.8
Windows Graphics Component Remote Code Execution Vulnerability
Double free in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.
-
Medium 5.5
Windows Storage Port Driver Information Disclosure Vulnerability
Out-of-bounds read in Storage Port Driver allows an authorized attacker to disclose information locally.
-
Medium 5.5
Windows GDI Information Disclosure Vulnerability
Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information locally.
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Null pointer dereference in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Graphic Fonts Remote Code Execution Vulnerability
Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows Message Queuing Remote Code Execution Vulnerability
Use after free in Windows Message Queuing allows an unauthorized attacker to execute code over a network.
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.