CVE Vulnerability Catalog

A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Heap-based buffer overflow vulnerability in Windows Media. An unauthorized attacker can exploit this vulnerability to execute code locally.

A vulnerability in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

A vulnerability in Visual Studio Code due to improper input validation allows an unauthorized attacker to bypass a security feature locally.

A protection mechanism failure in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Windows Narrator Braille has an untrusted search path vulnerability that allows an authorized attacker to elevate privileges locally.

Use After Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.

A protection mechanism failure in Windows Boot Manager allows an authorized attacker to bypass a security feature locally.

Use After Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.

Use-After-Free vulnerability in Remote Desktop Client allows an unauthorized attacker to execute code remotely.

Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to execute code locally.

Untrusted search path vulnerability in Windows Storage allows an authorized attacker to elevate privileges locally.

Microsoft Office contains a heap-based buffer overflow vulnerability that allows an unauthorized attacker to execute code locally.

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

A cross-site scripting (XSS) vulnerability in Microsoft Exchange Server due to improper input neutralization during web page generation. Allows an unauthorized attacker to perform spoofing over a network.

Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.

Vulnerability in Visual Studio Code involving inclusion of functionality from an untrusted control sphere, allowing an unauthorized attacker to elevate privileges locally.

Heap-based buffer overflow in Remote Desktop Client. An unauthenticated attacker can execute code over a network.