CVE Vulnerability Catalog

A vulnerability in Windows Uniscribe allows an attacker to execute code remotely via a specially crafted website or document, potentially leading to serious security breaches.

The Uniscribe component in Windows 8.1, Windows Server 2012, Windows RT 8.1, Windows 10, and Windows Server 2016 has a vulnerability that allows remote code execution due to improper handling of objects in memory.

The DHCP service in Windows Server 2012 Gold and R2, and Windows Server 2016 contains a vulnerability that allows an attacker to run arbitrary code on the DHCP failover server or cause the DHCP service to become nonresponsive due to a memory corruption issue.

A vulnerability in Windows graphics across various Microsoft operating system versions and Microsoft Office allows an attacker to execute remote code through improper handling of embedded fonts.

A vulnerability in the Windows Kernel-Mode Drivers component allows for elevation of privilege when the Win32k component fails to properly handle objects in memory. This affects multiple versions of Windows, including Windows Server 2008 and Windows 10.

A vulnerability in Microsoft Edge on Windows 10 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from flaws in the browser's JavaScript engines when rendering content in memory.

Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft browser JavaScript engines render content when handling objects in memory.

A remote code execution vulnerability exists in Microsoft Excel and related applications due to improper handling of objects in memory. This affects Excel versions 2010, 2013, 2016, as well as web apps and Mac versions.

A remote code execution vulnerability exists in Excel Services and various versions of Microsoft Excel and Office Online, caused by improper handling of objects in memory. This issue affects multiple versions of Excel, including 2007, 2010, 2013, and 2016, as well as web applications related to these versions.

Microsoft Office 2016 contains a remote code execution vulnerability due to improper handling of objects in memory, known as 'Microsoft Office Memory Corruption Vulnerability'.

A remote code execution vulnerability exists in Microsoft Excel for Mac 2011 when it fails to properly handle objects in memory.

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.

Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.

The NetBT Session Services component in Windows allows remote code execution due to failure in maintaining certain sequencing requirements. This affects multiple versions of Windows, including Windows Server 2008 R2 SP1 and Windows 10.

IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 (including DB2 Connect Server) could allow a local user to obtain elevated privileges and overwrite DB2 files.

IBM DB2 for Linux, UNIX and Windows versions 9.7, 10.1, 10.5, and 11.1 may allow a local user with DB2 instance owner privileges to gain root access.

In BlackCat CMS version 1.2.2, unrestricted file upload is possible in backend/media/ajax_rename.php via the extension parameter, allowing the extension to be changed from .jpg to .php.

AnyDesk before 3.6.1 on Windows has a DLL injection vulnerability.

In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php.

IBM QRadar versions 7.2 and 7.3 disclose sensitive information to unauthorized users, which can be used to mount further attacks on the system.