Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1202An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector fail to…
- CVE-2020-1201An elevation of privilege vulnerability exists in the way the Windows Now Playing Session Manager handles objects in memory, aka 'Windows…
- CVE-2020-1199An elevation of privilege vulnerability exists when the Windows Feedback Hub improperly handles objects in memory, aka 'Windows Feedback…
- CVE-2020-1197An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash, aka 'Windows Error…
- CVE-2020-1196An elevation of privilege vulnerability exists in the way that the printconfig.dll handles objects in memory, aka 'Windows Print…
- CVE-2020-1194A denial of service vulnerability exists when Windows Registry improperly handles filesystem operations, aka 'Windows Registry Denial of…
- CVE-2020-1183A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1181A remote code execution vulnerability exists in Microsoft SharePoint Server when it fails to properly identify and filter unsafe ASP.Net…
- CVE-2020-1178An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted…
- CVE-2020-1177A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-1170An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the…
- CVE-2020-1163An elevation of privilege vulnerability exists in Windows Defender that leads arbitrary file deletion on the system.To exploit the…
- CVE-2020-1162An elevation of privilege (user to user) vulnerability exists in Windows Security Health Service when handling certain objects in…
- CVE-2020-1160An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka…
- CVE-2020-1148A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…
- CVE-2020-1120A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka…
- CVE-2020-1073A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0986An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva
- CVE-2020-0916An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka…
- CVE-2020-0915An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory, aka…
- CVE-2020-1195Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2020-1192Visual Studio Code Python Extension Remote Code Execution Vulnerability
- CVE-2020-1191Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1190Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1189Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1188Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1187Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1186Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1185Windows State Repository Service Elevation of Privilege Vulnerability
- CVE-2020-1184Windows State Repository Service Elevation of Privilege Vulnerability