Microsoft

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

Use after free in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to elevate privileges

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to p

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a net

Heap-based buffer overflow in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feat

Incorrect conversion between numeric types in Windows Common Log File System Driver allows an authorized attacker to ele

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.

Heap-based buffer overflow in Windows Telephony Server allows an unauthorized attacker to execute code over a network.

Out-of-bounds read in Windows USB Video Driver allows an authorized attacker to disclose information with a physical att

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in a command ('command injection') in Azure Command Line Integration (C

Heap-based buffer overflow in Role: Windows Hyper-V allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to

Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.

Improper verification of cryptographic signature in .NET allows an authorized attacker to execute code over a network.

Sensitive data storage in improperly locked memory in Windows Remote Desktop Services allows an unauthorized attacker to

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security fea

Improper privilege management in Azure Agent Installer allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows exFAT File System allows an unauthorized attacker to execute code locally.

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 could disclose sensitiv

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.3 UI could disclosure the installation path

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing

A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authen

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.

There is an improper access control issue in ArcGIS Server versions 11.3 and below on Windows and Linux which, under uni

MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthori

IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared reso

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is ret

IBM EntireX 11.1 could allow a local user to cause a denial of service due to use of a regular expression with an ineffi

IBM EntireX 11.1 could allow an authenticated attacker to traverse directories on the system. An attacker could send a s

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a c

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the cuobjdump binary, where a user could cause a c

NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause an out-of-bou

Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnera

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 thro

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when