Microsoft

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an una

Access of resource using incompatible type ('type confusion') in Windows Win32K - ICOMP allows an authorized attacker to

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Hyper-V allows an

Integer overflow or wraparound in Windows Distributed Transaction Coordinator allows an authorized attacker to disclose

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a net

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute

Use after free in Remote Access Point-to-Point Protocol (PPP) EAP-TLS allows an authorized attacker to elevate privilege

Time-of-check time-of-use (toctou) race condition in Windows NTFS allows an unauthorized attacker to disclose informatio

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Use of uninitialized resource in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to discl

Access of resource using incompatible type ('type confusion') in Windows Push Notifications allows an authorized attacke

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to p

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Functio

Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an unauthorized attacker to execut

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac

Missing synchronization in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Dynamics 365 (on-premi

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Graphics Compon

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over

Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne

Improper access control in Azure Virtual Machines allows an authorized attacker to perform spoofing locally.

Improper restriction of communication channel to intended endpoints in Windows Hyper-V allows an authorized attacker to

Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to pe

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network

Improper access control in SQL Server allows an authorized attacker to elevate privileges over a network.

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Use After Free vulnerability that could lead to disclo

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could r

Illustrator versions 28.7.8, 29.6.1 and earlier are affected by an out-of-bounds write vulnerability that could result i

A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by

Azure Portal Elevation of Privilege Vulnerability

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

Microsoft 365 Copilot BizChat Information Disclosure Vulnerability

Azure OpenAI Elevation of Privilege Vulnerability

Tyler Technologies ERP Pro 9 SaaS allows an authenticated user to escape the application and execute limited operating s

Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinc

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform