2019

A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0.8.8. When the libssh S

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the S4U (MS-

All Samba versions 4.x.x before 4.9.17, 4.10.x before 4.10.11 and 4.11.x before 4.11.3 have an issue, where the (poorly

A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request,

An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle o

A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microso

An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or lat

A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected

A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScrip

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Wind

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To e

An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memor

An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memor

An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Ser

An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while lo

An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard li

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Window

A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from

An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validat

An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Wi

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its m

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle o

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects i

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in

A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle o

A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly

Type confusion in JavaScript in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit hea

Insufficient policy enforcement in payments in Google Chrome prior to 79.0.3945.79 allowed a remote attacker who had com

Insufficient policy enforcement in downloads in Google Chrome on Windows prior to 79.0.3945.79 allowed a local attacker

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoo

Incorrect security UI in interstitials in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domai

Insufficient policy enforcement in navigation in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacke

Incorrect security UI in Omnibox in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spoo

Incorrect security UI in printing in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to perform domain spo

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to disabl

Insufficient policy enforcement in extensions in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass

Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sens

Out of bounds read in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sens

Uninitialized data in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to obtain potentially sens

Insufficient data validation in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass defens

Incorrect security UI in Omnibox in Google Chrome on iOS prior to 79.0.3945.79 allowed a remote attacker to spoof the co

Insufficient policy enforcement in developer tools in Google Chrome prior to 79.0.3945.79 allowed a local attacker to ob

Uninitialized data in rendering in Google Chrome on Android prior to 79.0.3945.79 allowed a remote attacker to potential