2019

eQ-3 Homematic CCU2 prior to 2.47.10 and CCU3 prior to 3.47.10 JSON API has Improper Access Control for Interface.***Met

eQ-3 Homematic AddOn 'CloudMatic' on CCU2 and CCU3 allows uncontrolled admin access, resulting in the ability to obtain

An elevation of privilege vulnerability exists in Azure Active Directory Authentication Library On-Behalf-Of flow, in th

An elevation of privilege vulnerability exists in Dynamics On-Premise v9. An attacker who successfully exploited the vul

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memo

An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memo

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an

A spoofing vulnerability exists in the way Microsoft Outlook iOS software parses specifically crafted email messages. An

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted pac

A memory corruption vulnerability exists in the Windows Server DHCP service when processing specially crafted packets. A

An elevation of privilege vulnerability exists in Git for Visual Studio when it improperly parses configuration files. A

A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted pac

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a speciall

An information disclosure vulnerability exists in the way Microsoft SharePoint handles session objects. An authenticated

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memo

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in m

A remote code execution vulnerability exists in Microsoft Outlook when the software fails to properly handle objects in

An elevation of privilege exists in SyncController.dll. An attacker who successfully exploited the vulnerability could r

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Mi

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerabil

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins.

An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An at

A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file

A denial of service vulnerability exists when the XmlLite runtime (XmlLite.dll) improperly parses XML input. An attacker

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists due to a stack corruption in Windows Subsystem for Linux. An attacker who

An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls

This information is being revised to indicate that this CVE (CVE-2019-1183) is fully mitigated by the security updates f

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an

A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an

An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory. An attacker w

An elevation of privilege vulnerability exists in the way that the ssdpsrv.dll handles objects in memory. An attacker wh

An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who succes

An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory. An attacker who

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An a

An elevation of privilege vulnerability exists in the way that the PsmServiceExtHost.dll handles objects in memory. An a

An information disclosure vulnerability exists in Azure Active Directory (AAD) Microsoft Account (MSA) during the login

An information disclosure vulnerability exists in SymCrypt during the OAEP decryption stage. An attacker who successfull

An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox e