CVE Vulnerability Catalog

When browsing private tabs, some data related to location history or webpage thumbnails could be persisted incorrectly within the sandboxed app bundle after app termination. This vulnerability affects Firefox for iOS < 127.

A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate a trusted website. The flaw stems from improper URL processing, which can lead to a fake address bar being displayed.

A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to manipulate the user interface, such as the address bar. This can be used to display misleading content, tricking users into believing they are on a legitimate site.

A spoofing vulnerability in Microsoft Edge for iOS allows user interface manipulation, potentially leading to the display of fraudulent content or web pages.

NTFS-3G before 75dcdc2 has a use-after-free in ntfs_uppercase_mbs in libntfs-3g/unistr.c. Discussion suggests that exploitation would be challenging.

A vulnerability was found in GNU Nano allowing possible privilege escalation through an insecure temporary file. If Nano is killed while editing, it saves an emergency file with the permissions of the running user, giving attackers a window to escalate privileges via a malicious symlink.

An information disclosure vulnerability in Microsoft Dynamics 365 (On-Premises) allows unauthorized users to access sensitive data. The flaw stems from improper access control management of system resources.

A vulnerability in Azure Identity Libraries and Microsoft Authentication Library (MSAL) allows elevation of privilege. An attacker can exploit this flaw to gain unauthorized access to resources protected by Azure Active Directory.

A vulnerability in Microsoft Azure File Sync allows elevation of privilege. An attacker could exploit this flaw to gain unauthorized access to resources.

A vulnerability in Windows Cryptographic Services allows information disclosure. An attacker could exploit this flaw to read sensitive data stored in system memory.

A vulnerability in the Windows Container Manager Service allows elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.

A vulnerability in Windows Remote Access Connection Manager could lead to information disclosure. An attacker may exploit this flaw to access sensitive data stored on the system.

A vulnerability in Winlogon allows elevation of privilege in Windows systems. An attacker could exploit this flaw to gain higher privileges on the device.

A vulnerability in the Winlogon component of Windows allows elevation of privilege. This flaw can be exploited by a local attacker to gain higher privileges on the system.

A vulnerability in Windows Themes allows a Denial of Service (DoS) attack. An attacker can exploit a specially crafted theme file to cause system crash or hang.

A remote code execution vulnerability in Windows Distributed File System (DFS) allows an attacker to execute arbitrary code remotely in the user context. Exploitation requires sending a specially crafted request to the DFS service.

A remote code execution vulnerability in Visual Studio allows an attacker to execute arbitrary code in the context of the logged-in user. Exploitation requires user interaction, such as opening a specially crafted project file.

Elevation of privilege vulnerability in Visual Studio. An attacker could exploit this flaw to gain elevated privileges on the system.

A flaw was found in Booth, a cluster ticket manager. If a specially-crafted hash is passed to gcry_md_get_algo_dlen(), it may allow an invalid HMAC to be accepted by the Booth server.