Microsoft

Bridge is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the co

Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context

Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary c

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perf

Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote

Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute

Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw

Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate p

Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.

Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service o

Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.

Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.

Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.

Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tamperin

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw

Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a

Animate is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability t

Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the con

Animate is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the con

Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vul

Animate is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the conte

Animate is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vul

Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.

Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature ov

Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over

Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a netw

Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a ne

Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges

Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.

Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.

Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.

Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networki

Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.

Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.

Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.

Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a ne

Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.

Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges loc

Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.

Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.

Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.

Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate pr

Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.