Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1369An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows…
- CVE-2020-1368An elevation of privilege vulnerability exists in the way that the Credential Enrollment Manager service handles objects in memory, aka…
- CVE-2020-1367An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2020-1366An elevation of privilege vulnerability exists when the Windows Print Workflow Service improperly handles objects in memory, aka 'Windows…
- CVE-2020-1365An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this…
- CVE-2020-1364A denial of service vulnerability exists in the way that the WalletService handles files, aka 'Windows WalletService Denial of Service…
- CVE-2020-1363An elevation of privilege vulnerability exists when the Windows Picker Platform improperly handles memory.To exploit this vulnerability…
- CVE-2020-1362An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows…
- CVE-2020-1361An information disclosure vulnerability exists in the way that the WalletService handles memory.To exploit the vulnerability, an attacker…
- CVE-2020-1360An elevation of privilege vulnerability exists when the Windows Profile Service improperly handles file operations, aka 'Windows Profile…
- CVE-2020-1359An elevation of privilege vulnerability exists when the Windows Cryptography Next Generation (CNG) Key Isolation service improperly…
- CVE-2020-1358An information disclosure vulnerability exists when the Windows Resource Policy component improperly handles memory.To exploit this…
- CVE-2020-1357An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations, aka 'Windows…
- CVE-2020-1356An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations, aka 'Windows…
- CVE-2020-1355A remote code execution vulnerability exists when the Windows Font Driver Host improperly handles memory.An attacker who successfully…
- CVE-2020-1354An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability…
- CVE-2020-1353An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1352An elevation of privilege vulnerability exists when the Windows USO Core Worker improperly handles memory.To exploit this vulnerability…
- CVE-2020-1351An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft…
- CVE-2020-1350A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka…
- CVE-2020-1347An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations, aka 'Windows Storage…
- CVE-2020-1346An elevation of privilege vulnerability exists when the Windows Modules Installer improperly handles file operations, aka 'Windows Modules…
- CVE-2020-1344An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows…
- CVE-2020-1342An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable…
- CVE-2020-1336Windows Kernel Elevation of Privilege Vulnerability
- CVE-2020-1333An elevation of privilege vulnerability exists when Group Policy Services Policy Processing improperly handle reparse points, aka 'Group…
- CVE-2020-1330An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka…
- CVE-2020-1326A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure…
- CVE-2020-1267This security update corrects a denial of service in the Local Security Authority Subsystem Service (LSASS) caused when an authenticated…
- CVE-2020-1249An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…