Microsoft Office Word Information Disclosure Vulnerability

Microsoft Office Word Information Disclosure Vulnerability

Microsoft Office Word Information Disclosure Vulnerability

Microsoft Office Word Information Disclosure Vulnerability

Microsoft Office PowerPoint Information Disclosure Vulnerability

Microsoft Office PowerPoint Information Disclosure Vulnerability

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Microsoft Authentication Library (MSAL) for Node.js Information Disclosure Vulnerability

Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate privileges over a network.

A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition.

The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.

Use of uninitialized resource in Windows Kernel allows an authorized attacker to disclose information locally.

Untrusted pointer dereference in Windows Network File System allows an authorized attacker to disclose information locally.

Out-of-bounds read in Windows Remote Desktop Protocol allows an authorized attacker to disclose information over a network.

Microsoft Windows Codecs Library Denial of Service Vulnerability

Heap-based buffer overflow in Windows Portable Device MTP Driver allows an unauthorized attacker to elevate privileges with a physical attack.

Untrusted pointer dereference in Windows Storage Port Driver allows an unauthorized attacker to elevate privileges with a physical attack.

No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.

Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over a network.

Incorrect privilege assignment in Visual Studio Code allows an authorized attacker to bypass a security feature locally.

Buffer over-read in Windows Broadcast DVR User Service allows an authorized attacker to disclose information locally.

Improper authorization in DNS Server allows an authorized attacker to perform tampering locally.

HID Class Driver Elevation of Privilege Vulnerability

Microsoft Office Word Information Disclosure Vulnerability

Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Active Directory Federation Services (AD FS) Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Untrusted pointer dereference in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.

Microsoft Defender Information Disclosure Vulnerability

Improper input validation in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.