Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1239A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…
- CVE-2020-1238A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…
- CVE-2020-1237An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation…
- CVE-2020-1236A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-1235An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1234An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles objects in memory.To exploit this…
- CVE-2020-1233An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1232An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation…
- CVE-2020-1231An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1230A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1229A security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system…
- CVE-2020-1226A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-1225A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-1223A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the…
- CVE-2020-1222An elevation of privilege vulnerability exists when the Microsoft Store Runtime improperly handles memory.To exploit this vulnerability…
- CVE-2020-1220A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft…
- CVE-2020-1219A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory…
- CVE-2020-1217An information disclosure vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime…
- CVE-2020-1216A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1215A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1214A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1213A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-1212An elevation of privilege vulnerability exists when an OLE Automation component improperly handles memory.To exploit this vulnerability…
- CVE-2020-1211An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-1209An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows…
- CVE-2020-1208A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-1207An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-1206An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain…
- CVE-2020-1204An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka…
- CVE-2020-1203An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to…