Filtered by vendor Microsoft
Subscribe
Total
22989 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2025-29834 | 1 Microsoft | 1 Edge Chromium | 2025-07-08 | N/A | 7.5 HIGH |
|
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
|
|||||
| CVE-2025-33065 | 1 Microsoft | 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33063 | 1 Microsoft | 11 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 8 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33062 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33061 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33060 | 1 Microsoft | 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33059 | 1 Microsoft | 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33058 | 1 Microsoft | 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33055 | 1 Microsoft | 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-32720 | 1 Microsoft | 14 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 11 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-32719 | 1 Microsoft | 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-47181 | 1 Microsoft | 1 Edge Update | 2025-07-08 | N/A | 8.8 HIGH |
|
Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
|
|||||
| CVE-2025-47161 | 1 Microsoft | 1 Defender For Endpoint | 2025-07-08 | N/A | 7.8 HIGH |
|
Improper access control in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.
|
|||||
| CVE-2024-43614 | 1 Microsoft | 1 Defender For Endpoint | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally.
|
|||||
| CVE-2025-21174 | 1 Microsoft | 5 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 2 more | 2025-07-08 | N/A | 7.5 HIGH |
|
Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network.
|
|||||
| CVE-2025-24068 | 1 Microsoft | 13 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 10 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Buffer over-read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-24065 | 1 Microsoft | 10 Windows 10 1507, Windows 10 22h2, Windows 11 22h2 and 7 more | 2025-07-08 | N/A | 5.5 MEDIUM |
|
Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally.
|
|||||
| CVE-2025-33070 | 1 Microsoft | 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more | 2025-07-08 | N/A | 8.1 HIGH |
|
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network.
|
|||||
| CVE-2025-33071 | 1 Microsoft | 6 Windows Server 2012, Windows Server 2016, Windows Server 2019 and 3 more | 2025-07-08 | N/A | 8.1 HIGH |
|
Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.
|
|||||
| CVE-2025-0966 | 3 Ibm, Linux, Microsoft | 4 Aix, Infosphere Information Server, Linux Kernel and 1 more | 2025-07-08 | N/A | 7.6 HIGH |
|
IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
|
|||||
| CVE-2025-3221 | 3 Ibm, Linux, Microsoft | 4 Aix, Infosphere Information Server, Linux Kernel and 1 more | 2025-07-08 | N/A | 7.5 HIGH |
|
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources.
|
|||||
| CVE-2025-3629 | 3 Ibm, Linux, Microsoft | 4 Aix, Infosphere Information Server, Linux Kernel and 1 more | 2025-07-08 | N/A | 4.3 MEDIUM |
|
IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6
could allow an authenticated user to delete another user's comments due to improper ownership management.
|
|||||
| CVE-2025-21194 | 1 Microsoft | 54 Surface Go 2 1901, Surface Go 2 1901 Firmware, Surface Go 2 1926 and 51 more | 2025-07-08 | N/A | 7.1 HIGH |
|
Microsoft Surface Security Feature Bypass Vulnerability
|
|||||
| CVE-2025-21191 | 1 Microsoft | 15 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 12 more | 2025-07-07 | N/A | 7.0 HIGH |
|
Time-of-check time-of-use (toctou) race condition in Windows Local Security Authority (LSA) allows an authorized attacker to elevate privileges locally.
|
|||||
| CVE-2023-28267 | 1 Microsoft | 14 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 11 more | 2025-07-07 | N/A | 6.5 MEDIUM |
|
Remote Desktop Protocol Client Information Disclosure Vulnerability
|
|||||
| CVE-2023-29362 | 1 Microsoft | 13 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 10 more | 2025-07-07 | N/A | 8.8 HIGH |
|
Remote Desktop Client Remote Code Execution Vulnerability
|
|||||
| CVE-2023-29352 | 1 Microsoft | 8 Remote Desktop Client, Windows 10 1809, Windows 10 21h2 and 5 more | 2025-07-07 | N/A | 6.5 MEDIUM |
|
Windows Remote Desktop Security Feature Bypass Vulnerability
|
|||||
| CVE-2025-26645 | 1 Microsoft | 16 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 13 more | 2025-07-07 | N/A | 8.8 HIGH |
|
Relative path traversal in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
|
|||||
| CVE-2023-28290 | 1 Microsoft | 1 Remote Desktop App | 2025-07-07 | N/A | 5.3 MEDIUM |
|
Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability
|
|||||
| CVE-2024-56467 | 3 Ibm, Linux, Microsoft | 3 Entirex, Linux Kernel, Windows | 2025-07-07 | N/A | 3.3 LOW |
|
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
|
|||||
| CVE-2025-32715 | 1 Microsoft | 17 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 14 more | 2025-07-07 | N/A | 6.5 MEDIUM |
|
Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
|
|||||
| CVE-2024-56493 | 3 Ibm, Linux, Microsoft | 3 Entirex, Linux Kernel, Windows | 2025-07-07 | N/A | 3.3 LOW |
|
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
|
|||||
| CVE-2025-27487 | 1 Microsoft | 17 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 14 more | 2025-07-07 | N/A | 8.0 HIGH |
|
Heap-based buffer overflow in Remote Desktop Client allows an authorized attacker to execute code over a network.
|
|||||
| CVE-2024-56494 | 3 Ibm, Linux, Microsoft | 3 Entirex, Linux Kernel, Windows | 2025-07-07 | N/A | 3.3 LOW |
|
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
|
|||||
| CVE-2024-56495 | 3 Ibm, Linux, Microsoft | 3 Entirex, Linux Kernel, Windows | 2025-07-07 | N/A | 3.3 LOW |
|
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
|
|||||
| CVE-2024-56496 | 3 Ibm, Linux, Microsoft | 3 Entirex, Linux Kernel, Windows | 2025-07-07 | N/A | 3.3 LOW |
|
IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
|
|||||
| CVE-2022-24503 | 1 Microsoft | 12 Remote Desktop Client, Windows 10, Windows 11 and 9 more | 2025-07-07 | 5.0 MEDIUM | 5.4 MEDIUM |
|
Remote Desktop Protocol Client Information Disclosure Vulnerability
|
|||||
| CVE-2022-26940 | 1 Microsoft | 3 Remote Desktop Client, Windows 11, Windows Server 2022 | 2025-07-07 | 4.0 MEDIUM | 6.5 MEDIUM |
|
Remote Desktop Protocol Client Information Disclosure Vulnerability
|
|||||
| CVE-2021-1669 | 1 Microsoft | 5 Remote Desktop, Remote Desktop Client, Windows 10 and 2 more | 2025-07-07 | 6.5 MEDIUM | 8.8 HIGH |
|
Windows Remote Desktop Security Feature Bypass Vulnerability
|
|||||
| CVE-2024-38131 | 1 Microsoft | 16 Remote Desktop Client, Windows 10 1507, Windows 10 1607 and 13 more | 2025-07-07 | N/A | 8.8 HIGH |
|
Clipboard Virtual Channel Extension Remote Code Execution Vulnerability
|
|||||