CVE Vulnerability Catalog

Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server. An unauthorized attacker can perform spoofing over a network.

An improper link resolution before file access ('link following') in .NET allows an unauthorized attacker to perform tampering locally.

XSS vulnerability in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.

XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

XSS vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

A cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to inject malicious script into a web page. The attack can lead to content spoofing and credential theft.

XSS vulnerability in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Buffer over-read vulnerability in Microsoft Office allows an unauthorized attacker to disclose information locally.

A path traversal vulnerability in Microsoft Office SharePoint allows an authorized attacker to execute code remotely. The issue stems from improper limitation of a pathname to a restricted directory.

XSS vulnerability in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.

The implementations of AES-SIV and AES-GCM-SIV in OpenSSL mishandle authentication of AAD with empty ciphertext, allowing forgery of such messages. An attacker can send arbitrary AAD with empty ciphertext and a zero tag, which will be accepted as valid.

Microsoft Office has an out-of-bounds read vulnerability that allows an unauthorized attacker to disclose information locally.

An out-of-bounds read in the Windows DWM Core Library allows an authorized attacker to disclose information locally.

Use-after-free vulnerability in Windows Network Controller (NC) Host Agent allows an authorized attacker to deny service locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.

Exposure of sensitive information to an unauthorized actor in Windows Hyper-V allows an authorized attacker to disclose information locally.

A vulnerability in Windows Push Notifications allows an authorized attacker to disclose sensitive information to an unauthorized actor locally.

Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.