cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2020-1311An elevation of privilege vulnerability exists when Component Object Model (COM) client uses special case IIDs, aka 'Component Object…High · 7.8Jun 9, 2020
CVE-2020-1310An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…Medium · 6.7Jun 9, 2020
CVE-2020-1309An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability…High · 7.8Jun 9, 2020
CVE-2020-1307An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…High · 7.8Jun 9, 2020
CVE-2020-1306An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…High · 7.8Jun 9, 2020
CVE-2020-1305An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka…High · 7.8Jun 9, 2020
CVE-2020-1304An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…High · 7.8Jun 9, 2020
CVE-2020-1302An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem…High · 7.8Jun 9, 2020
CVE-2020-1301A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain…High · 8.8Jun 9, 2020
CVE-2020-1300A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability…High · 8.8Jun 9, 2020
CVE-2020-1299A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An…High · 8.8Jun 9, 2020
CVE-2020-1298A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4Jun 9, 2020
CVE-2020-1297A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4Jun 9, 2020
CVE-2020-1296A vulnerability exists in the way the Windows Diagnostics & feedback settings app handles objects in memory, aka 'Windows Diagnostics…Medium · 5.5Jun 9, 2020
CVE-2020-1295An elevation of privilege vulnerability exists in Microsoft SharePoint, aka 'Microsoft SharePoint Elevation of Privilege Vulnerability'.High · 8.8Jun 9, 2020
CVE-2020-1294An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows…High · 7.8Jun 9, 2020
CVE-2020-1293An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka…High · 7.8Jun 9, 2020
CVE-2020-1292An elevation of privilege vulnerability exists in OpenSSH for Windows when it does not properly restrict access to configuration settings…High · 7.8Jun 9, 2020
CVE-2020-1291An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…High · 7.8Jun 9, 2020
CVE-2020-1290An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…Medium · 5.5Jun 9, 2020
CVE-2020-1289A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4Jun 9, 2020
CVE-2020-1287An elevation of privilege vulnerability exists in the way that the Windows WalletService handles objects in memory, aka 'Windows…High · 7.8Jun 9, 2020
CVE-2020-1286A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths.An attacker who successfully…High · 8.8Jun 9, 2020
CVE-2020-1284A denial of service vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain…Medium · 6.5Jun 9, 2020
CVE-2020-1283A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Medium · 6.5Jun 9, 2020
CVE-2020-1282An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…High · 7.8Jun 9, 2020
CVE-2020-1281A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote…High · 8.8Jun 9, 2020
CVE-2020-1280An elevation of privilege vulnerability exists in the way that the Windows Bluetooth Service handles objects in memory, aka 'Windows…High · 7.8Jun 9, 2020
CVE-2020-1279An elevation of privilege vulnerability exists when Windows Lockscreen fails to properly load spotlight images from a secure location, aka…High · 7.8Jun 9, 2020
CVE-2020-1278An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka…High · 7.8Jun 9, 2020