Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability
CVE-2026-34339
Null pointer dereference in Windows LDAP - Lightweight Directory Access Protocol allows an authorized attacker to deny s
#msrc
共收录 2178 条相关情报。
← 返回所有主题Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-34338
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-34336
Buffer over-read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
Windows TCP/IP Elevation of Privilege Vulnerability
CVE-2026-34334
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an
Windows Kernel-Mode Driver Remote Code Execution Vulnerability
CVE-2026-34332
Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to execute code over a network.
Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability
CVE-2026-33838
Double free in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
Windows TCP/IP Local Elevation of Privilege Vulnerability
CVE-2026-33837
Heap-based buffer overflow in Windows TCP/IP allows an authorized attacker to elevate privileges locally.
Azure Machine Learning Notebook Spoofing Vulnerability
CVE-2026-33833
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Machine Lear
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-33112
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-33110
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a ne
ASP.NET Core Denial of Service Vulnerability
CVE-2026-42899
Loop with unreachable exit condition ('infinite loop') in ASP.NET Core allows an unauthorized attacker to deny service o
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-42898
Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized a
Windows DWM Core Library Elevation of Privilege Vulnerability
CVE-2026-42896
Integer overflow or wraparound in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
Windows Telephony Service Elevation of Privilege Vulnerability
CVE-2026-42825
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
.NET Core Tampering Vulnerability
CVE-2026-32175
A tampering vulnerability exists when .NET Core improperly handles specially crafted files. An attacker who successfully
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-42891
此漏洞影响基于Chromium的Microsoft Edge浏览器Android版本。由于用户界面（UI）对关键信息的错误表示，未经授权的攻击者能够通过网络执行欺骗攻击。攻击者可能利用此漏洞伪造地址栏或安全指示，诱使用户访问恶意网站或泄露敏
Chromium: CVE-2026-7941 Insufficient validation of untrusted input in Mobile
CVE-2026-7941
CVE-2026-7941 是 Chromium 项目（一个开源浏览器引擎）中一个影响移动版（Mobile）的漏洞。该漏洞源于对不可信输入的验证不足（Insufficient validation of untrusted input），攻
Chromium: CVE-2026-7931 Insufficient validation of untrusted input in iOS
CVE-2026-7931
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability.
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-35429
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
CVE-2026-40416
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized