Filtered by vendor Microsoft
Subscribe
Total
21502 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2021-43899 | 1 Microsoft | 2 Wireless Display Adapter, Wireless Display Adapter Firmware | 2024-11-21 | 7.5 HIGH | 9.8 CRITICAL |
Microsoft 4K Wireless Display Adapter Remote Code Execution Vulnerability | |||||
CVE-2021-43896 | 1 Microsoft | 1 Powershell | 2024-11-21 | 4.3 MEDIUM | 5.5 MEDIUM |
Microsoft PowerShell Spoofing Vulnerability | |||||
CVE-2021-43893 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-11-21 | 6.0 MEDIUM | 7.5 HIGH |
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability | |||||
CVE-2021-43892 | 1 Microsoft | 1 Biztalk Esb Toolkit | 2024-11-21 | 4.3 MEDIUM | 7.4 HIGH |
Microsoft BizTalk ESB Toolkit Spoofing Vulnerability | |||||
CVE-2021-43891 | 1 Microsoft | 1 Visual Studio Code | 2024-11-21 | 6.8 MEDIUM | 7.8 HIGH |
Visual Studio Code Remote Code Execution Vulnerability | |||||
CVE-2021-43889 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 6.5 MEDIUM | 7.2 HIGH |
Microsoft Defender for IoT Remote Code Execution Vulnerability | |||||
CVE-2021-43888 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 5.0 MEDIUM | 7.5 HIGH |
Microsoft Defender for IoT Information Disclosure Vulnerability | |||||
CVE-2021-43883 | 1 Microsoft | 10 Windows 10, Windows 11, Windows 7 and 7 more | 2024-11-21 | 4.6 MEDIUM | 7.8 HIGH |
Windows Installer Elevation of Privilege Vulnerability | |||||
CVE-2021-43882 | 1 Microsoft | 1 Defender For Iot | 2024-11-21 | 7.5 HIGH | 9.0 CRITICAL |
Microsoft Defender for IoT Remote Code Execution Vulnerability | |||||
CVE-2021-43880 | 1 Microsoft | 1 Windows 11 | 2024-11-21 | 3.6 LOW | 5.5 MEDIUM |
Windows Mobile Device Management Elevation of Privilege Vulnerability | |||||
CVE-2021-43877 | 1 Microsoft | 3 Asp.net Core, Visual Studio 2019, Visual Studio 2022 | 2024-11-21 | 4.6 MEDIUM | 8.8 HIGH |
ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability | |||||
CVE-2021-43876 | 1 Microsoft | 2 Sharepoint Enterprise Server, Sharepoint Server | 2024-11-21 | 6.0 MEDIUM | 8.8 HIGH |
Microsoft SharePoint Elevation of Privilege Vulnerability | |||||
CVE-2021-43875 | 1 Microsoft | 2 365 Apps, Office | 2024-11-21 | 6.8 MEDIUM | 7.8 HIGH |
Microsoft Office Graphics Remote Code Execution Vulnerability | |||||
CVE-2021-43800 | 2 Microsoft, Requarks | 2 Windows, Wiki.js | 2024-11-21 | 4.3 MEDIUM | 7.5 HIGH |
Wiki.js is a wiki app built on Node.js. Prior to version 2.5.254, directory traversal outside of Wiki.js context is possible when a storage module with local asset cache fetching is enabled on a Windows host. A malicious user can potentially read any file on the file system by crafting a special URL that allows for directory traversal. This is only possible on a Wiki.js server running on Windows, when a storage module implementing local asset cache (e.g Local File System or Git) is enabled and that no web application firewall solution (e.g. cloudflare) strips potentially malicious URLs. Commit number 414033de9dff66a327e3f3243234852f468a9d85 fixes this vulnerability by sanitizing the path before it is passed on to the storage module. The sanitization step removes any windows directory traversal sequences from the path. As a workaround, disable any storage module with local asset caching capabilities (Local File System, Git). | |||||
CVE-2021-43772 | 2 Microsoft, Trendmicro | 5 Windows, Antivirus\+ Security, Internet Security and 2 more | 2024-11-21 | 2.1 LOW | 5.5 MEDIUM |
Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection. | |||||
CVE-2021-43763 | 3 Adobe, Apple, Microsoft | 3 Dimension, Macos, Windows | 2024-11-21 | 4.3 MEDIUM | 3.3 LOW |
Adobe Dimension versions 3.4.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious TIF file. | |||||
CVE-2021-43760 | 3 Adobe, Apple, Microsoft | 3 Media Encoder, Macos, Windows | 2024-11-21 | N/A | 3.3 LOW |
Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious MOV file. | |||||
CVE-2021-43759 | 3 Adobe, Apple, Microsoft | 3 Media Encoder, Macos, Windows | 2024-11-21 | N/A | 3.3 LOW |
Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious MP4 file. | |||||
CVE-2021-43758 | 3 Adobe, Apple, Microsoft | 3 Media Encoder, Macos, Windows | 2024-11-21 | N/A | 3.3 LOW |
Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious MP4 file. | |||||
CVE-2021-43757 | 3 Adobe, Apple, Microsoft | 3 Media Encoder, Macos, Windows | 2024-11-21 | N/A | 7.8 HIGH |
Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious 3GP ?file |