Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1405An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka…
- CVE-2020-1404An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1403A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1402An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this…
- CVE-2020-1401A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-1400A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-1399An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1398An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly handle Ease of Access dialog.An attacker who…
- CVE-2020-1397An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory…
- CVE-2020-1396An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker…
- CVE-2020-1395An elevation of privilege vulnerability exists in the way that the Windows Speech Brokered API handles objects in memory, aka 'Windows…
- CVE-2020-1394An elevation of privilege vulnerability exists in the way that the Windows Geolocation Framework handles objects in memory, aka 'Windows…
- CVE-2020-1393An elevation of privilege vulnerability exists when the Windows Diagnostics Hub Standard Collector Service fails to properly sanitize…
- CVE-2020-1392An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka…
- CVE-2020-1391An information disclosure vulnerability exists when the Windows Agent Activation Runtime (AarSvc) fails to properly handle objects in…
- CVE-2020-1390An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…
- CVE-2020-1389An information disclosure vulnerability exists when the Windows kernel fails to properly initialize a memory address, aka 'Windows Kernel…
- CVE-2020-1388An elevation of privilege vulnerability exists in the way that the psmsrv.dll handles objects in memory, aka 'Windows Elevation of…
- CVE-2020-1387An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows…
- CVE-2020-1386An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information…
- CVE-2020-1385An elevation of privilege vulnerability exists in the way that the Windows Credential Picker handles objects in memory, aka 'Windows…
- CVE-2020-1384An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly…
- CVE-2020-1382An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…
- CVE-2020-1381An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…
- CVE-2020-1375An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of…
- CVE-2020-1374A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2020-1373An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…
- CVE-2020-1372An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles objects in…
- CVE-2020-1371An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this…
- CVE-2020-1370An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…