Microsoft

Improper access control in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.

Improper control of generation of code ('code injection') in Azure Monitor Agent allows an unauthorized attacker to exec

Heap-based buffer overflow in Windows Cred SSProvider Protocol allows an authorized attacker to elevate privileges local

Use after free in Universal Print Management Service allows an authorized attacker to elevate privileges locally.

Untrusted pointer dereference in Windows Event Tracing allows an authorized attacker to elevate privileges locally.

Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.

Improper input validation in Windows Storage VSP Driver allows an authorized attacker to elevate privileges locally.

Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker

Out-of-bounds read in Windows Kerberos allows an authorized attacker to deny service over a network.

Use after free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Double free in Windows SSDP Service allows an authorized attacker to elevate privileges locally.

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Input Method Ed

Buffer over-read in Virtual Hard Disk (VHDX) allows an unauthorized attacker to elevate privileges locally.

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager

Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to ele

After Effects versions 25.2, 24.6.6 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead

After Effects versions 25.2, 24.6.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to d

Audition versions 25.2, 24.6.3 and earlier are affected by an Access of Memory Location After End of Buffer vulnerabilit

Insufficient UI warning of dangerous operations in Remote Desktop Client allows an unauthorized attacker to perform spoo

Processor optimization removal or modification of security-critical code in Windows Kernel allows an authorized attacker

Improper link resolution before file access ('link following') in Service Fabric allows an authorized attacker to elevat

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 throug

IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 could disclose sensitive installat

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 throug

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized

In Tenable Nessus versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrit

No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write v

Credentials are not cleared from memory after being used. A user with Administrator permissions can execute memory dump

Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with previously granted permi

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to execute arbitrary code on the system with

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL s

Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker wh

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow an authenticated user to delete another user's

IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service d

RARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to exe

Exposure of private personal information to an unauthorized actor in Dynamics 365 FastTrack Implementation Assets allows

Untrusted DLLs in the installer's directory may be loaded and executed, leading to potentially arbitrary code execution

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulne

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 could allo

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnera

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection (XXE)

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 could allow a privileged user to escalate their privilege

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6 and 6.2.0.0 through 6.2.0.4 is vulnera

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that cou

Trend Micro Security 17.8 (Consumer) is vulnerable to a link following local privilege escalation vulnerability that cou

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to e