Vulnerabilities > Microsoft > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-02-09 CVE-2021-21121 Use After Free vulnerability in multiple products
Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
network
low complexity
google microsoft CWE-416
critical
9.6
2020-07-14 CVE-2020-1350 Unspecified vulnerability in Microsoft products
A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows DNS Server Remote Code Execution Vulnerability'.
network
low complexity
microsoft
critical
10.0
2020-07-14 CVE-2020-1043 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1042 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1041 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1040 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1036 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1032 Improper Input Validation vulnerability in Microsoft products
A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authenticated user on a guest operating system, aka 'Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability'.
low complexity
microsoft CWE-20
critical
9.0
2020-07-14 CVE-2020-1025 Improper Input Validation vulnerability in Microsoft products
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation.
network
low complexity
microsoft CWE-20
critical
9.8
2020-05-21 CVE-2020-1112 Unrestricted Upload of File with Dangerous Type vulnerability in Microsoft products
An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.
network
low complexity
microsoft CWE-434
critical
9.9