The internet is broken right now.

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Access of resource using incompatible type ('type confusion') in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

Memory safety

Use of uninitialized resource in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

Memory safety

Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows GDI allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Incorrect authorization in Active Directory Domain Services allows an authorized attacker to execute code over a network.

Auth & access OS & kernel

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Other Server

Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Incomplete list of disallowed inputs in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.

Other

Heap-based buffer overflow in Graphic Fonts allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Exposure of sensitive system information to an unauthorized control sphere in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.

Disclosure OS & kernel

Null pointer dereference in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to deny service over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outside the temporary directory via unsanitized attachment filenames. Attackers can email attachments with ../ sequences in filenames, and when the recipient downloads all attachments, files like ~/.forward are overwritten, enabling command execution.

Disclosure Web app

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

Memory safety

Out-of-bounds read in Windows DNS allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Integer overflow or wraparound in Windows DNS allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Buffer over-read in Windows iSCSI Target Service allows an unauthorized attacker to disclose information over a network.

Memory safety OS & kernel

Out-of-bounds read in Windows DNS allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Buffer over-read in SQL Server allows an unauthorized attacker to disclose information over a network.

Memory safety Server

Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Auth & access OS & kernel

Exposure of sensitive information to an unauthorized actor in Windows Secure Kernel Mode allows an authorized attacker to disclose information locally.

Disclosure OS & kernel

Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.

Memory safety Server

Use after free in XML in Google Chrome prior to 157.0.8103.50 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

exploited Memory safety Browser & mail Google Chrome

The Printcart Store – Web to Print Product Designer for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.13.2. This is due to the `nbu_crop_image` AJAX handler accepting a user-supplied `url` parameter that `Nbdesigner_IO::convert_url_to_path()` concatenates onto the uploads base directory without normalizing or stripping `../` sequences, and then deriving both the output directory and output file extension via `pathinfo()` from the same attacker-controlled path — with no `stripImage()` call before `writeImage()` is invoked. This makes it possible for unauthenticated attackers to write attacker-controlled PHP content to arbitrary locations outside the uploads directory, resulting in remote code execution when the written file is subsequently requested. This vulnerability is only exploitable when the `nbdesigner_upload_popup_style` site option is set to `a` (Advanced Upload Popup), which causes the handler to be registered for unauthenticated requests; however, the required `save-design` nonce is printed on the fully public frontend `upload-design-file` page, making it trivially obtainable by any anonymous visitor once that configuration is active.

Injection Web app

Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.

Disclosure OS & kernel

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Windows Storage Spaces Controller allows an unauthorized attacker to elevate privileges over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.

Memory safety

Stack-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network.

Memory safety OS & kernel

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

Memory safety