Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-1051Jet Database Engine Remote Code Execution Vulnerability
- CVE-2020-1048Windows Print Spooler Elevation of Privilege Vulnerability
- CVE-2020-1037Chakra Scripting Engine Memory Corruption Vulnerability
- CVE-2020-1035VBScript Remote Code Execution Vulnerability
- CVE-2020-1028Media Foundation Memory Corruption Vulnerability
- CVE-2020-1024Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-1023Microsoft SharePoint Remote Code Execution Vulnerability
- CVE-2020-1021Windows Error Reporting Elevation of Privilege Vulnerability
- CVE-2020-1010Microsoft Windows Elevation of Privilege Vulnerability
- CVE-2020-0963Windows GDI Information Disclosure Vulnerability
- CVE-2020-0909Windows Hyper-V Denial of Service Vulnerability
- CVE-2020-0901Microsoft Excel Remote Code Execution Vulnerability
- CVE-2020-1094An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work…
- CVE-2020-1050A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web…
- CVE-2020-1049A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web…
- CVE-2020-1029An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations…
- CVE-2020-1027An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o
- CVE-2020-1026A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the…
- CVE-2020-1022A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution…
- CVE-2020-1020A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially
- CVE-2020-1019An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka…
- CVE-2020-1018An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of…
- CVE-2020-1017An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows…
- CVE-2020-1016An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka…
- CVE-2020-1015An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows…
- CVE-2020-1014An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka…
- CVE-2020-1011An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows…
- CVE-2020-1009An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected…
- CVE-2020-1008A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-1007An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…