Search Results (10553 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-50188 1 Trimble 1 Sketchup Viewer 2025-07-08 N/A
Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-20792.
CVE-2024-43602 1 Microsoft 1 Azure Cyclecloud 2025-07-08 9.9 Critical
Azure CycleCloud Remote Code Execution Vulnerability
CVE-2023-50187 1 Trimble 1 Sketchup Viewer 2025-07-08 N/A
Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-20789.
CVE-2023-50195 1 Trimble 1 Sketchup Viewer 2025-07-08 N/A
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21799.
CVE-2023-50194 1 Trimble 1 Sketchup Viewer 2025-07-08 N/A
Trimble SketchUp Viewer SKP File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21788.
CVE-2024-43579 1 Microsoft 1 Edge Chromium 2025-07-08 7.6 High
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43596 1 Microsoft 1 Edge Chromium 2025-07-08 6.5 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43578 1 Microsoft 1 Edge Chromium 2025-07-08 7.6 High
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43587 1 Microsoft 1 Edge Chromium 2025-07-08 5.9 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2023-50193 1 Trimble 1 Sketchup Viewer 2025-07-08 N/A
Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21787.
CVE-2024-43497 1 Microsoft 1 Deepspeed 2025-07-08 8.4 High
DeepSpeed Remote Code Execution Vulnerability
CVE-2024-49023 1 Microsoft 1 Edge Chromium 2025-07-08 5.9 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43595 1 Microsoft 1 Edge Chromium 2025-07-08 6.5 Medium
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2024-43566 1 Microsoft 1 Edge Chromium 2025-07-08 7.5 High
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2022-33678 1 Microsoft 1 Azure Site Recovery 2025-07-08 7.2 High
Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-33676 1 Microsoft 1 Azure Site Recovery 2025-07-08 7.2 High
Azure Site Recovery Remote Code Execution Vulnerability
CVE-2022-33633 1 Microsoft 3 Lync Server, Skype For Business, Skype For Business Server 2025-07-08 7.2 High
Skype for Business and Lync Remote Code Execution Vulnerability
CVE-2022-22039 1 Microsoft 9 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 6 more 2025-07-08 7.5 High
Windows Network File System Remote Code Execution Vulnerability
CVE-2022-22038 1 Microsoft 17 Windows 10, Windows 10 1507, Windows 10 1607 and 14 more 2025-07-08 8.1 High
Remote Procedure Call Runtime Remote Code Execution Vulnerability
CVE-2022-22029 1 Microsoft 9 Windows Server 2008, Windows Server 2008 R2, Windows Server 2008 Sp2 and 6 more 2025-07-08 8.1 High
Windows Network File System Remote Code Execution Vulnerability