Rezultati pretraživanja za 'Proizvođač: microsoft'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-66389 | 7.5 | GitHub Copilot 1.372.0 allows filesystem access outside of a workspace folder (without user approval) via a file-handler URI parameter to fetch_webpage. Therefore, exfiltration could occur if there is indirect prompt injection. | 2026-10-12 22:10:00 | 2026-06-22 14:16:24 |
| CVE-2025-62821 | 9.1 | Microsoft HEIF Image Extensions 1.2.22.0 has an out-of-bounds read because CHEIFItemInfoEntry_GetDataSize can return success while leaving the reported data size as 0. This causes a caller to make a 1-byte allocation. Later, CopyPixels computes copy_ | 2026-10-12 22:10:00 | 2026-06-19 14:16:21 |
| CVE-2025-23355 | 6.7 | NVIDIA Nsight Graphics for Windows contains a vulnerability in an ngfx component, where an attacker could cause a DLL highjacking attack. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, | 2026-10-12 15:10:00 | 2025-10-01 22:15:30 |
| CVE-2025-54081 | 6.7 | Sunshine is a self-hosted game stream host for Moonlight. Prior to version 2025.923.33222, the Windows service SunshineService is installed with an unquoted executable path. If Sunshine is installed in a directory whose name includes a space, the Ser | 2026-10-11 20:10:00 | 2025-09-23 19:15:39 |
| CVE-2012-2524 | 9.3 | Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka "CGM File Format Memory Corruption Vulnerabilit | 2026-10-09 20:17:03 | 2012-08-15 01:55:01 |
| CVE-2011-3389 | 4.3 | The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man | 2026-10-09 20:17:02 | 2011-09-06 19:55:03 |
| CVE-2004-0230 | 5.0 | TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that u | 2026-10-09 20:17:02 | 2004-08-18 04:00:00 |
| CVE-2015-2467 | 9.3 | Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | 2026-10-09 19:16:41 | 2015-08-15 00:59:26 |
| CVE-2015-2466 | 9.3 | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka "Microsoft Office Remote Code Execution Vulnerability." | 2026-10-09 19:16:40 | 2015-08-15 00:59:25 |
| CVE-2000-1200 | 5.0 | Windows NT allows remote attackers to list all users in a domain by obtaining the domain SID with the LsaQueryInformationPolicy policy function via a null session and using the SID to list the users. | 2026-10-09 19:16:39 | 2001-08-31 04:00:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/2317
Zapisa po stranici: