Microsoft

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentica

An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to ac

A post-auth SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to e

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentic

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentica

An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentica

A SQL injection vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to escalate pr

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial

A link following vulnerability in the anti-malware solution portion of Trend Micro Deep Security 20.0 agents could allow

A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to escalate privile

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (SaaS) could allow an attacker to manipul

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modOSCE component could allo

A Server-side Request Forgery (SSRF) vulnerability in Trend Micro Apex Central (on-premise) modTMSM component could allo

An uncontrolled search path vulnerability in the Trend Micro Worry-Free Business Security Services (WFBSS) agent could h

An insecure access control vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security could allo

An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authenticat

An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentica

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget in versions below 8.0.6955 could allow an atta

An unrestricted file upload vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an att

A Local File Inclusion vulnerability in a Trend Micro Apex Central widget below version 8.0.6955 could allow an attacker

Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Win

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could execute c

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could arbitrari

In Tenable Agent versions prior to 10.8.5 on a Windows host, it was found that a non-administrative user could overwrite

Improper neutralization of special elements used in a command ('command injection') in Visual Studio allows an authorize

Untrusted search path in .NET and Visual Studio allows an unauthorized attacker to execute code over a network.

Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to ac

os.OpenFile(path, os.O_CREATE|O_EXCL) behaved differently on Unix and Windows systems when the target path was a danglin

Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulne

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a NULL Pointer Dereference

InCopy versions 20.2, 19.5.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an Information Exposure vul

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds read vulne

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by an out-of-bounds write vuln

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

Acrobat Reader versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier are affected by a Use After Free vulnerabil

InCopy versions 20.2, 19.5.3 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could resu

Improper neutralization of input during web page generation ('cross-site scripting') in Nuance Digital Engagement Platfo

Exposure of sensitive information to an unauthorized actor in Windows Hello allows an authorized attacker to disclose in

Improper input validation in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.

Improper access control in Windows SDK allows an authorized attacker to elevate privileges locally.

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.

External control of file name or path in Windows Security App allows an authorized attacker to perform spoofing locally.

Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privi

Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.