cve.bz

microsoft vulnerabilities, newest first, page 190

Filter
  1. 5.5CVE-2021-24084EPSS 2.7%

    Windows Mobile Device Management Information Disclosure Vulnerability

  2. 7.8CVE-2021-24083EPSS 2.9%

    Windows Address Book Remote Code Execution Vulnerability

  3. 4.3CVE-2021-24082EPSS 2.6%

    Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability

  4. 7.8CVE-2021-24081EPSS 2.5%

    Microsoft Windows Codecs Library Remote Code Execution Vulnerability

  5. 6.5CVE-2021-24080EPSS 3.1%

    Windows Trust Verification API Denial of Service Vulnerability

  6. 5.5CVE-2021-24079EPSS 0.9%

    Windows Backup Engine Information Disclosure Vulnerability

  7. 9.8CVE-2021-24078EPSS 12%

    Windows DNS Server Remote Code Execution Vulnerability

  8. 9.8CVE-2021-24077EPSS 2.9%

    Windows Fax Service Remote Code Execution Vulnerability

  9. 5.5CVE-2021-24076EPSS 0.9%

    Microsoft Windows VMSwitch Information Disclosure Vulnerability

  10. 6.8CVE-2021-24075EPSS 2.5%

    Microsoft Windows VMSwitch Denial of Service Vulnerability

  11. 9.8CVE-2021-24074EPSS 26%

    Windows TCP/IP Remote Code Execution Vulnerability

  12. 6.5CVE-2021-24073EPSS 1.8%

    Skype for Business and Lync Spoofing Vulnerability

  13. 8.8CVE-2021-24072EPSS 2.4%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  14. 5.3CVE-2021-24071EPSS 2.7%

    Microsoft SharePoint Information Disclosure Vulnerability

  15. 7.8CVE-2021-24070EPSS 2.5%

    Microsoft Excel Remote Code Execution Vulnerability

  16. 7.8CVE-2021-24069EPSS 2.5%

    Microsoft Excel Remote Code Execution Vulnerability

  17. 7.8CVE-2021-24068EPSS 2.5%

    Microsoft Excel Remote Code Execution Vulnerability

  18. 7.8CVE-2021-24067EPSS 2.5%

    Microsoft Excel Remote Code Execution Vulnerability

  19. 8.8CVE-2021-24066EPSS 6.3%

    Microsoft SharePoint Remote Code Execution Vulnerability

  20. 7.5CVE-2021-1734EPSS 3.8%

    Windows Remote Procedure Call Information Disclosure Vulnerability

  21. 7.8CVE-2021-1733EPSS 0.6%

    Sysinternals PsExec Elevation of Privilege Vulnerability

  22. 7.8CVE-2021-1732KEVExploitEPSS 78%

    Windows Win32k Elevation of Privilege Vulnerability

  23. 5.5CVE-2021-1731EPSS 0.9%

    PFX Encryption Security Feature Bypass Vulnerability

  24. 5.4CVE-2021-1730EPSS 1.8%

    <p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p> <p>This update addresses this vulnerability.</p> <p>To prevent these types of a…

  25. 8.8CVE-2021-1728EPSS 2.0%

    System Center Operations Manager Elevation of Privilege Vulnerability

  26. 7.8CVE-2021-1727EPSS 0.8%

    Windows Installer Elevation of Privilege Vulnerability

  27. 8.0CVE-2021-1726EPSS 2.1%

    Microsoft SharePoint Server Spoofing Vulnerability

  28. 6.1CVE-2021-1724EPSS 1.3%

    Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

  29. 8.1CVE-2021-1722EPSS 2.4%

    Windows Fax Service Remote Code Execution Vulnerability

  30. 6.5CVE-2021-1721EPSS 3.3%

    .NET Core and Visual Studio Denial of Service Vulnerability

  31. 7.8CVE-2021-1698EPSS 0.7%

    Windows Win32k Elevation of Privilege Vulnerability

  32. 7.0CVE-2021-1639EPSS 2.1%

    Visual Studio Code Remote Code Execution Vulnerability

  33. 8.8CVE-2020-17162EPSS 2.4%

    Microsoft Windows Security Feature Bypass Vulnerability

  34. 8.8CVE-2021-21157EPSS 9.5%

    Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  35. 4.3CVE-2021-3339EPSS 2.0%

    ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen.

  36. 7.2CVE-2021-23338EPSS 3.6%

    This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function.

  37. 6.5CVE-2021-21141EPSS 5.9%

    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.

  38. 6.8CVE-2021-21140EPSS 0.8%

    Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.

  39. 6.5CVE-2021-21139EPSS 5.1%

    Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

  40. 6.5CVE-2021-21137EPSS 6.4%

    Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.

  41. 6.5CVE-2021-21136EPSS 4.5%

    Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

  42. 6.5CVE-2021-21135EPSS 21%

    Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

  43. 6.5CVE-2021-21134EPSS 5.4%

    Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.

  44. 6.5CVE-2021-21133EPSS 3.3%

    Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.

  45. 9.6CVE-2021-21132EPSS 25%

    Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.

  46. 6.5CVE-2021-21131EPSS 8.2%

    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

  47. 6.5CVE-2021-21130EPSS 5.9%

    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

  48. 6.5CVE-2021-21129EPSS 5.9%

    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

  49. 8.8CVE-2021-21128EPSS 7.0%

    Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  50. 8.8CVE-2021-21127EPSS 6.3%

    Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.