197 docs tagged with "Microsoft"

Microsoft Commercial Internet System (MCIS) IMAP server allows remote attackers to cause a denial of

The xp_displayparamstmt function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does n

The xp_enumresultset function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not

The xp_showcolv function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not prope

The xp_updatecolvbm function in SQL Server and Microsoft SQL Server Desktop Engine (MSDE) does not p

The xp_peekqueue function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) does not

The xp_printstatements function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) do

The xp_proxiedmetadata function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) do

The xp_SetSQLSecurity function in Microsoft SQL Server 2000 and SQL Server Desktop Engine (MSDE) doe

Buffer overflow in Microsoft Phone Book Service allows local users to execute arbitrary commands, ak

Microsoft Windows Media Player 7 executes scripts in custom skin (.WMS) files, which could allow rem

Buffer overflow in Microsoft Windows Media Player allows remote attackers to execute arbitrary comma

The installation of Microsoft Exchange 2000 before Rev. A creates a user account with a known passwo

Buffer overflow in the Microsoft Message Queue Manager (MSQM) allows remote attackers to cause a den

Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allo

The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP l

The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not pro

Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly valid

The WINS service (wins.exe) on Microsoft Windows NT Server 4.0, Windows 2000 Server, and Windows Ser

Multiple cross-site scripting (XSS) vulnerabilities in Microsoft W3Who ISAPI (w3who.dll) allow remot

Buffer overflow in the Microsoft W3Who ISAPI (w3who.dll) allows remote attackers to cause a denial o

A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party product

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP

Heap-based buffer overflow in T2EMBED.DLL in Microsoft Windows 2000 SP4, XP SP1 and SP2, and Server

An unspecified Microsoft WMF parsing application, as used in Internet Explorer 5.01 SP4 on Windows 2

Microsoft Windows Graphics Rendering Engine (GRE) allows remote attackers to corrupt memory and caus

By design, Microsoft Visual Studio 2005 automatically executes code in the Load event of a user-defi

Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers

Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted rem

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted rem

Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X fo

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 200

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and

The kernel in Microsoft Windows 2000 SP4, XP SP2, and Server 2003, when ICMP Router Discovery Protoc

Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows r

Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows loc

Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large w

Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer

Unspecified vulnerability in Local Security Authority Subsystem Service (LSASS) in Microsoft Windows

The Microsoft VFP_OLE_Server ActiveX control allows remote attackers to execute arbitrary code by in

An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to exe

The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execu

Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arb

An ActiveX control in prtstb06.dll in Microsoft Money 2006, when used with WScript in Windows Script

Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of servi

A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windo

Integer signedness error in the SQLConnectW function in an ODBC API (odbc32.dll) in Microsoft Data A

Microsoft Data Access Components (MDAC) 2.8 SP1 and SP2, and Windows Data Access Components (WDAC) 6

Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Ex

Microsoft Internet Explorer on Windows XP allows remote attackers to trigger an incorrect GUI displa

The kernel in Microsoft Windows XP SP2, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) i

Unspecified vulnerability in DirectShow in DirectX in Microsoft Windows XP SP2 and SP3, Windows Serv

The Client/Server Run-time Subsystem (aka CSRSS) in the Win32 subsystem in Microsoft Windows XP SP2

The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate cha

Untrusted search path vulnerability in the Windows Object Packager configuration in Microsoft Window

Incomplete blacklist vulnerability in the Windows Packager configuration in Microsoft Windows XP SP2

The Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.

Buffer overflow in the Windows Forms (aka WinForms) component in Microsoft .NET Framework 1.0 SP3, 1

Buffer overflow in a System.DirectoryServices.Protocols (S.DS.P) namespace method in Microsoft .NET

Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properl

The WCF Replace function in the Open Data (aka OData) protocol implementation in Microsoft .NET Fram

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which

win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, a

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and

Cross-site scripting (XSS) vulnerability in Microsoft System Center Operations Manager 2007 SP1 and

The Print Spooler in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows r

The SSL provider component in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1,

The Color Management Module (Icm32.dll) in Windows 7 SP1 and Windows Server 2008 SP2 and R2 SP1 allo

The Microsoft Server Message Block (SMB) Server in Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Se

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Window

Microsoft .NET Framework 1.1, 2.0, 3.0, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 5.7

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an att

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Window

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacke

Microsoft .NET Framework 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, .NET Co

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Serv

Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Serv

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, and Microsoft Outlook 2016 a

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the

Microsoft Outlook 2007, Microsoft Outlook 2010 and Microsoft Outlook 2013 allow a remote code execut

Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code executio

Microsoft Excel in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsof

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code executio

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsof

Microsoft Access in Microsoft SharePoint Enterprise Server 2013 and Microsoft SharePoint Enterprise

Microsoft Edge in Microsoft Windows 10 1709 allows an attacker to obtain information to further comp

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsof

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsof

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Of

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Of

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Of

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Of

Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Of

Microsoft ChakraCore allows an attacker to bypass Control Flow Guard (CFG) in conjunction with anoth

Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a u

Kentico 9.0 through 11.0 has a stack-based buffer overflow via the SqlName, SqlPswd, Database, UserN

A DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which all

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft Defender Remote Code Execution Vulnerability

Microsoft splwow64 Elevation of Privilege Vulnerability

Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For

Microsoft is aware of the "Impersonation in the Passkey Entry Protocol" vulnerability. For

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Windows Media Foundation Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SharePoint Server Tampering Vulnerability

Microsoft SharePoint Elevation of Privilege Vulnerability

SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, vers

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Excel Remote Code Execution Vulnerability

Microsoft Word Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Diagnostics Hub Standard Collector Runtime Elevation of Privilege Vulnerability

Microsoft Dynamics 365 (on-premises) Spoofing Vulnerability

Microsoft Cluster Port Driver Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Dynamics 365 Customer Engagement Cross-Site Scripting Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

Microsoft DWM Core Library Elevation of Privilege Vulnerability

Microsoft Cryptographic Services Elevation of Privilege Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Remote Code Execution Vulnerability

Microsoft Office Visio Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft SharePoint Server Security Feature Bypass Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server Spoofing Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Common Log File System Elevation of Privilege Vulnerability

Microsoft ODBC Driver Remote Code Execution Vulnerability

Microsoft Online Certificate Status Protocol (OCSP) Remote Code Execution Vulnerability

Microsoft Virtual Hard Disk Elevation of Privilege Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Message Queuing Denial of Service Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vu

Microsoft AllJoyn API Denial of Service Vulnerability

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

Microsoft Bluetooth Driver Spoofing Vulnerability

Microsoft Message Queuing Information Disclosure Vulnerability

Microsoft SharePoint Server Remote Code Execution Vulnerability

Microsoft Identity Denial of service vulnerability

Microsoft Printer Metadata Troubleshooter Tool Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

omniauth-microsoft_graph provides an Omniauth strategy for the Microsoft Graph API. Prior to version

Under certain conditions the Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)