Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows Netlogon Remote Code Execution Vulnerability
Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
Use after free in Windows Internet Connection Sharing (ICS) allows an unauthorized attacker to execute code over a network.
-
Medium 4.4
Windows Hello Security Feature Bypass Vulnerability
Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally.
-
High 8.1
IP Helper Remote Code Execution Vulnerability
Use after free in IP Helper allows an unauthorized attacker to execute code over a network.
-
High 8.8
Windows Imaging Component Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code over a network.
-
Critical 9.8
Windows DHCP Server Remote Code Execution Vulnerability
Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.
-
Medium 5.9
Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Allocation of resources without limits or throttling in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
High 7.0
Windows Win32k Elevation of Privilege Vulnerability
Incorrect authorization in Windows Win32K allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
Medium 5.9
Windows DHCP Server Information Disclosure Vulnerability
Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.
-
High 8.2
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.
-
High 7.5
Microsoft Office SharePoint Remote Code Execution Vulnerability
Time-of-check time-of-use (toctou) race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Access Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Microsoft Office SharePoint Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Office Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information over a network.
-
Medium 4.6
Microsoft Office SharePoint Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
High 8.8
Microsoft Office Publisher Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Remote Code Execution Vulnerability
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
-
High 8.8
Microsoft Office SharePoint Elevation of Privilege Vulnerability
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office PowerPoint Remote Code Execution Vulnerability
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 8.8
Raw Image Extension Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.
-
Critical 9.1
Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Windows Hyper-V Remote Code Execution Vulnerability
Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.
-
High 7.8
Graphic Fonts Elevation of Privilege Vulnerability
Use after free in Graphic Fonts allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Audio Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Audio Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.
-
High 7.8
Windows Biometric Service Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges locally.