Microsoft

Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Improper privilege management in Windows Kernel allows an unauthorized attacker to elevate privileges locally.

Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.

Missing authorization in Azure Virtual Desktop allows an authorized attacker to elevate privileges over a network.

Improper access control in Windows Defender Application Control (WDAC) allows an unauthorized attacker to bypass a security feature locally.

Untrusted pointer dereference in Windows Subsystem for Linux allows an unauthorized attacker to execute code locally.

Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (CLI) allows an unauthorized attacker to elevate privileges locally.

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine…

Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability

Remote Desktop Client Remote Code Execution Vulnerability

Microsoft/Muzic Remote Code Execution Vulnerability

Microsoft Power Automate Desktop Remote Code Execution Vulnerability

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network.

Windows Mark of the Web Security Feature Bypass Vulnerability

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Secure Boot Security Feature Bypass Vulnerability

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Azure Monitor Agent Elevation of Privilege Vulnerability

Windows Cryptographic Services Remote Code Execution Vulnerability

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Office Elevation of Privilege Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Raw Image Extension Remote Code Execution Vulnerability

Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability

Windows CD-ROM File System Driver Remote Code Execution Vulnerability

Windows Shell Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Windows Installer Elevation of Privilege Vulnerability

Visual Studio Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Windows Hyper-V Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Visual Studio Code Remote Containers Extension Remote Code Execution Vulnerability

Windows Virtual Registry Provider Elevation of Privilege Vulnerability