Microsoft

The OpenPGP specification allows a Cipher Feedback Mode (CFB) malleability-gadget attack that can indirectly lead to pla

The defaults settings for the CORS filter provided in Apache Tomcat 9.0.0.M1 to 9.0.8, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft E

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows

A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles obje

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information D

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle obj

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle o

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Micros

A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly hand

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially c

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle obje

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Code

An elevation of privilege vulnerability exists in the way that the Windows Kernel API enforces permissions, aka "Windows

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Win

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka "Window

A security feature bypass vulnerability exists when Internet Explorer fails to validate User Mode Code Integrity (UMCI)

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates certi

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka