Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1437An elevation of privilege vulnerability exists in the way that the Windows Network Location Awareness Service handles objects in memory…
- CVE-2020-1436A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted fonts.For all systems…
- CVE-2020-1435A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
- CVE-2020-1434An elevation of privilege vulnerability exists in the way that the Windows Sync Host Service handles objects in memory, aka 'Windows Sync…
- CVE-2020-1433An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge…
- CVE-2020-1432An information disclosure vulnerability exists when Skype for Business is accessed via Internet Explorer, aka 'Skype for Business via…
- CVE-2020-1431An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management…
- CVE-2020-1430An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability…
- CVE-2020-1429An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error…
- CVE-2020-1428An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…
- CVE-2020-1427An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…
- CVE-2020-1426An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2020-1424An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows…
- CVE-2020-1423An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for…
- CVE-2020-1422An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1421A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An…
- CVE-2020-1420An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this…
- CVE-2020-1419An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel…
- CVE-2020-1418An elevation of privilege vulnerability exists when the Windows Diagnostics Execution Service fails to properly sanitize input, leading to…
- CVE-2020-1416An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual…
- CVE-2020-1415An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1414An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1413An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1412A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…
- CVE-2020-1411An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1410A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the…
- CVE-2020-1409A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution…
- CVE-2020-1408A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…
- CVE-2020-1407A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-1406An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows…