cve.bz

microsoft vulnerabilities, newest first, page 191

Filter
  1. 6.5CVE-2021-21126EPSS 9.4%

    Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.

  2. 8.1CVE-2021-21125EPSS 8.7%

    Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

  3. 9.6CVE-2021-21124EPSS 8.5%

    Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

  4. 6.5CVE-2021-21123EPSS 11%

    Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

  5. 8.8CVE-2021-21122EPSS 7.6%

    Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  6. 9.6CVE-2021-21121EPSS 6.7%

    Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

  7. 8.8CVE-2021-21120EPSS 7.4%

    Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  8. 8.8CVE-2021-21119EPSS 7.4%

    Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

  9. 8.8CVE-2021-21118EPSS 18%

    Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

  10. 6.5CVE-2020-8567EPSS 1.5%

    Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths…

  11. 5.5CVE-2021-1725EPSS 1.1%

    Bot Framework SDK Information Disclosure Vulnerability

  12. 7.5CVE-2021-1723EPSS 5.3%

    ASP.NET Core and Visual Studio Denial of Service Vulnerability

  13. 8.0CVE-2021-1719EPSS 2.4%

    Microsoft SharePoint Elevation of Privilege Vulnerability

  14. 8.0CVE-2021-1718EPSS 2.8%

    Microsoft SharePoint Server Tampering Vulnerability

  15. 4.6CVE-2021-1717EPSS 2.0%

    Microsoft SharePoint Server Spoofing Vulnerability

  16. 7.8CVE-2021-1716EPSS 3.9%

    Microsoft Word Remote Code Execution Vulnerability

  17. 7.8CVE-2021-1715EPSS 3.9%

    Microsoft Word Remote Code Execution Vulnerability

  18. 7.8CVE-2021-1714EPSS 3.3%

    Microsoft Excel Remote Code Execution Vulnerability

  19. 7.8CVE-2021-1713EPSS 3.3%

    Microsoft Excel Remote Code Execution Vulnerability

  20. 8.0CVE-2021-1712EPSS 2.4%

    Microsoft SharePoint Elevation of Privilege Vulnerability

  21. 7.8CVE-2021-1711EPSS 3.9%

    Microsoft Office Remote Code Execution Vulnerability

  22. 7.8CVE-2021-1710EPSS 3.2%

    Microsoft Windows Media Foundation Remote Code Execution Vulnerability

  23. 7.0CVE-2021-1709EPSS 0.8%

    Windows Win32k Elevation of Privilege Vulnerability

  24. 5.7CVE-2021-1708EPSS 3.7%

    Windows GDI+ Information Disclosure Vulnerability

  25. 8.8CVE-2021-1707EPSS 3.9%

    Microsoft SharePoint Server Remote Code Execution Vulnerability

  26. 7.3CVE-2021-1706EPSS 2.2%

    Windows LUAFV Elevation of Privilege Vulnerability

  27. 4.2CVE-2021-1705EPSS 2.1%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  28. 7.3CVE-2021-1704EPSS 1.0%

    Windows Hyper-V Elevation of Privilege Vulnerability

  29. 7.8CVE-2021-1703EPSS 0.8%

    Windows Event Logging Service Elevation of Privilege Vulnerability

  30. 7.8CVE-2021-1702EPSS 0.8%

    Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability

  31. 8.8CVE-2021-1701EPSS 3.9%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  32. 8.8CVE-2021-1700EPSS 3.9%

    Remote Procedure Call Runtime Remote Code Execution Vulnerability

  33. 5.5CVE-2021-1699EPSS 2.1%

    Windows (modem.sys) Information Disclosure Vulnerability

  34. 7.8CVE-2021-1697EPSS 0.8%

    Windows InstallService Elevation of Privilege Vulnerability

  35. 5.5CVE-2021-1696EPSS 4.7%

    Windows Graphics Component Information Disclosure Vulnerability

  36. 7.8CVE-2021-1695EPSS 0.9%

    Windows Print Spooler Elevation of Privilege Vulnerability

  37. 7.5CVE-2021-1694EPSS 3.5%

    Windows Update Stack Elevation of Privilege Vulnerability

  38. 7.8CVE-2021-1693EPSS 0.8%

    Windows CSC Service Elevation of Privilege Vulnerability

  39. 7.7CVE-2021-1692EPSS 4.2%

    Windows Hyper-V Denial of Service Vulnerability

  40. 7.7CVE-2021-1691EPSS 4.1%

    Windows Hyper-V Denial of Service Vulnerability

  41. 7.8CVE-2021-1690EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  42. 7.8CVE-2021-1689EPSS 0.7%

    Windows Multipoint Management Elevation of Privilege Vulnerability

  43. 7.8CVE-2021-1688EPSS 0.7%

    Windows CSC Service Elevation of Privilege Vulnerability

  44. 7.8CVE-2021-1687EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  45. 7.8CVE-2021-1686EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability

  46. 7.3CVE-2021-1685EPSS 0.9%

    Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

  47. 5.0CVE-2021-1684EPSS 1.6%

    Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft ha…

  48. 5.0CVE-2021-1683EPSS 1.7%

    Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG. To address the vulnerability, Microsoft ha…

  49. 7.0CVE-2021-1682EPSS 0.7%

    Windows Kernel Elevation of Privilege Vulnerability

  50. 7.8CVE-2021-1681EPSS 0.7%

    Windows WalletService Elevation of Privilege Vulnerability