Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1240A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-1147A remote code execution vulnerability exists in .NET Framework, Microsoft SharePoint, and Visual Studio when the software fails to check the
- CVE-2020-1085An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka…
- CVE-2020-1043A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
- CVE-2020-1042A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
- CVE-2020-1041A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
- CVE-2020-1040A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an authentica
- CVE-2020-1036A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
- CVE-2020-1032A remote code execution vulnerability exists when Hyper-V RemoteFX vGPU on a host server fails to properly validate input from an…
- CVE-2020-1025Microsoft Office Elevation of Privilege Vulnerability
- CVE-2020-1349A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka…
- CVE-2020-1348An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2020-1343An information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka…
- CVE-2020-1340A spoofing vulnerability exists when the NuGetGallery does not properly sanitize input on package metadata values, aka 'NuGetGallery…
- CVE-2020-1334An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1331A spoofing vulnerability exists when System Center Operations Manager (SCOM) does not properly sanitize a specially crafted web request to…
- CVE-2020-1329A spoofing vulnerability exists when Microsoft Bing Search for Android improperly handles specific HTML content, aka 'Microsoft Bing…
- CVE-2020-1327A spoofing vulnerability exists in Microsoft Azure DevOps Server when it fails to properly handle web requests, aka 'Azure DevOps Server…
- CVE-2020-1324An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in…
- CVE-2020-1323An open redirect vulnerability exists in Microsoft SharePoint that could lead to spoofing.To exploit the vulnerability, an attacker could…
- CVE-2020-1322An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka…
- CVE-2020-1321A remote code execution vulnerability exists in Microsoft Office software when it fails to properly handle objects in memory, aka…
- CVE-2020-1320A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1318A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1317An elevation of privilege vulnerability exists when Group Policy improperly checks access, aka 'Group Policy Elevation of Privilege…
- CVE-2020-1316An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1315An information disclosure vulnerability exists when Internet Explorer improperly handles objects in memory, aka 'Internet Explorer…
- CVE-2020-1314An elevation of privilege vulnerability exists in Windows Text Service Framework (TSF) when the TSF server fails to properly handle…
- CVE-2020-1313An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka…
- CVE-2020-1312An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem…