Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1277An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem…
- CVE-2020-1276An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1275An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1274An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1273An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1272An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input…
- CVE-2020-1271An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this…
- CVE-2020-1270An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service…
- CVE-2020-1269An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1268An information disclosure vulnerability exists when a Windows service improperly handles objects in memory, aka 'Windows Service…
- CVE-2020-1266An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1265An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1264An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1263An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error…
- CVE-2020-1262An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1261An information disclosure vulnerability exists in the way Windows Error Reporting (WER) handles objects in memory, aka 'Windows Error…
- CVE-2020-1260A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1259A security feature bypass vulnerability exists when Windows Host Guardian Service improperly handles hashes recorded and logged, aka…
- CVE-2020-1258An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…
- CVE-2020-1257An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka…
- CVE-2020-1255An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly…
- CVE-2020-1254An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally…
- CVE-2020-1253An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-1251An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-1248A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
- CVE-2020-1247An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-1246An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-1244A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka…
- CVE-2020-1242An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge…
- CVE-2020-1241A security feature bypass vulnerability exists when Windows Kernel fails to properly sanitize certain parameters.To exploit the…