Vendor
Microsoft
14,257 known vulnerabilities.
Products
14,257 results · Feed
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
Medium 6.4
Azure DevOps Server Elevation of Privilege Vulnerability
Weak authentication in Azure DevOps Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Excel Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft PowerPoint Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
-
High 7.0
Visual Studio Code Elevation of Privilege Vulnerability
Missing authentication for critical function in Visual Studio Code allows an authorized attacker to elevate privileges locally.
-
Medium 6.5
Visual Studio Code Security Feature Bypass Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.8
Visual Studio Code Remote Code Execution Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
Medium 6.5
Visual Studio Code GitHub Pull Requests and Issues Extension Information Disclosure Vulnerability
External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows AppX Deployment Service Elevation of Privilege Vulnerability
Incorrect authorization in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.
-
High 8.8
Microsoft Office Word Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.
-
Medium 6.6
Microsoft Office Excel Remote Code Execution Vulnerability
Deserialization of untrusted data in Microsoft Office Excel allows an unauthorized attacker to execute code with a physical attack.
-
Medium 6.5
Microsoft Office Word Information Disclosure Vulnerability
Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
-
High 7.5
Microsoft Office Outlook Remote Code Execution Vulnerability
Use of uninitialized resource in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
-
High 8.8
Microsoft Office Outlook Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office Outlook allows an authorized attacker to execute code over a network.
-
High 7.8
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
Improper privilege management in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges locally.
-
Medium 5.9
Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability
Missing authentication for critical function in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
-
High 7.7
Azure Confidential Clean Rooms Tampering Vulnerability
Missing authorization in Azure Confidential Clean Rooms allows an authorized attacker to perform tampering over a network.
-
High 8.8
Microsoft Defender Remote Code Execution Vulnerability
Null pointer dereference in Microsoft Defender allows an unauthorized attacker to execute code over a network.
-
High 7.3
Aspire Information Disclosure Vulnerability
Insertion of sensitive information into log file in Aspire allows an authorized attacker to disclose information locally.
-
High 8.8
Visual Studio Code Security Feature Bypass Vulnerability
Trust boundary violation in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Improper access control in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 8.3
Visual Studio Code Remote Code Execution Vulnerability
Incorrect authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.0
Windows HTTP.sys Elevation of Privilege Vulnerability
Double free in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
-
Critical 9.6
Visual Studio Code Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
-
High 7.8
Microsoft Windows App Store Elevation of Privilege Vulnerability
Untrusted search path in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.
-
Critical 9.8
Windows Search Remote Code Execution Vulnerability
Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Inefficient algorithmic complexity in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.
-
High 7.5
.NET Denial of Service Vulnerability
Inefficient algorithmic complexity in .NET allows an unauthorized attacker to deny service over a network.
-
High 7.5
ASP.NET Core Denial of Service Vulnerability
Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.