CVE Vulnerability Catalog

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

An out-of-bounds read vulnerability in Microsoft Office Word allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.

The vulnerability in Microsoft Office involves the use of an uninitialized resource, allowing an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network due to improper input neutralization during web page generation.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An integer overflow or wraparound vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

An out-of-bounds read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The flaw is caused by improper neutralization of input during web page generation.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The issue stems from improper neutralization of input during web page generation.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. The issue stems from improper neutralization of input during web page generation.

An out-of-bounds read vulnerability exists in Windows RDP. An unauthorized attacker can exploit this to disclose information remotely over the network.

Access of resource using incompatible type ('type confusion') in SQL Server allows an authenticated attacker to disclose information over a network.

Use of an uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.

Improper neutralization of input during web page generation (cross-site scripting) in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.

Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.