| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
| Authentication bypass using an alternate path or channel in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network. |
| Heap-based buffer overflow in Windows Xbox Live Networking Service allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network. |
| Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
| Use after free in Windows Virtual Filtering Platform (VFP) allows an unauthorized attacker to execute code over a network. |
| Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to execute code over a network. |
| Release of invalid pointer or reference in Windows iSCSI allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network. |
| Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
| Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network. |
| Double free in Windows DNS allows an unauthorized attacker to execute code over a network. |
| Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network. |
| Heap-based buffer overflow in Xbox allows an unauthorized attacker to execute code over a network. |
| Improper authentication in Azure DevOps allows an authorized attacker to execute code over a network. |
| Heap-based buffer overflow in DNS Server allows an unauthorized attacker to execute code over a network. |
| Heap-based buffer overflow in Microsoft QUIC allows an unauthorized attacker to execute code over a network. |
| Use after free in Views in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
| Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a network. |
| Out of bounds write in ANGLE in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
