Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1339Windows Media Remote Code Execution Vulnerability
- CVE-2020-1337Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2020-1182Microsoft Dynamics 365 for Finance and Operations (on-premises) Remote Code Execution Vulnerability
- CVE-2020-1046.NET Framework Remote Code Execution Vulnerability
- CVE-2020-0604Visual Studio Code Remote Code Execution Vulnerability
- CVE-2020-1493Microsoft Outlook Information Disclosure Vulnerability
- CVE-2020-1457A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft…
- CVE-2020-1425A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft…
- CVE-2020-1481A remote code execution vulnerability exists in the ESLint extension for Visual Studio Code when it validates source code after opening a…
- CVE-2020-1469A denial of service vulnerability exists when the .NET implementation of Bond improperly parses input, aka 'Bond Denial of Service…
- CVE-2020-1468An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2020-1465An elevation of privilege vulnerability exists in Microsoft OneDrive that allows file deletion in arbitrary locations.To exploit the…
- CVE-2020-1463An elevation of privilege vulnerability exists in the way that the SharedStream Library handles objects in memory, aka 'Windows…
- CVE-2020-1462An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for…
- CVE-2020-1461An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit…
- CVE-2020-1458A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL)…
- CVE-2020-1456A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1454This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.
- CVE-2020-1451A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1450A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1449A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file…
- CVE-2020-1448A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-1447A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-1446A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-1445An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka 'Microsoft…
- CVE-2020-1444A remote code execution vulnerability exists in the way Microsoft SharePoint software parses specially crafted email messages, aka…
- CVE-2020-1443A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
- CVE-2020-1442A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web…
- CVE-2020-1439A remote code execution vulnerability exists in PerformancePoint Services for SharePoint Server when the software fails to check the…
- CVE-2020-1438An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…