Microsoft

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Heap-based buffer overflow in .NET allows an unauthorized attacker to elevate privileges locally.

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

Improper input validation in Windows Hyper-V allows an authorized attacker to execute code locally.

Missing authentication for critical function in SQL Server allows an authorized attacker to elevate privileges over a network.

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally.

Improper access control in Azure Event Grid allows an unauthorized attacker to elevate privileges over a network.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally.

Improper access control in Visual Studio allows an authorized attacker to elevate privileges locally.

Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.

Binding to an unrestricted ip address in GitHub allows an unauthorized attacker to execute code over a network.

Time-of-check time-of-use (toctou) race condition in Graphics Kernel allows an authorized attacker to execute code locally.

Use after free in Windows BitLocker allows an authorized attacker to elevate privileges locally.

Improper access control in Windows MultiPoint Services allows an authorized attacker to elevate privileges locally.

Relative path traversal in Windows Kerberos allows an authorized attacker to elevate privileges over a network.

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Use after free in Windows Media allows an authorized attacker to elevate privileges locally.

Improper link resolution before file access ('link following') in Windows Performance Recorder allows an authorized attacker to deny service locally.

Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorized attacker to execute code over a network.

Improper input validation in Microsoft Office Outlook allows an authorized attacker to execute code locally.

Improper link resolution before file access ('link following') in Windows Recovery Driver allows an authorized attacker to elevate privileges locally.

Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally.

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network.

Uncontrolled search path element in Visual Studio Code allows an authorized attacker to elevate privileges locally.

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

Uncontrolled search path element in Visual Studio allows an authorized attacker to elevate privileges locally.

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network.

Visual Studio Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Windows Domain Name Service Remote Code Execution Vulnerability

Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability

Windows Kernel Elevation of Privilege Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office Spoofing Vulnerability

DHCP Server Service Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability

Microsoft SharePoint Server Information Disclosure Vulnerability