cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2020-1006An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows…High · 7.8Apr 15, 2020
CVE-2020-1005An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka…Medium · 5.5Apr 15, 2020
CVE-2020-1004An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Apr 15, 2020
CVE-2020-1003An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…High · 7.8Apr 15, 2020
CVE-2020-1002An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit…High · 7.1Apr 15, 2020
CVE-2020-1001An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows…High · 7.8Apr 15, 2020
CVE-2020-1000An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…High · 7.8Apr 15, 2020
CVE-2020-0999A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 15, 2020
CVE-2020-0996An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows…High · 7.8Apr 15, 2020
CVE-2020-0995A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 15, 2020
CVE-2020-0994A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 15, 2020
CVE-2020-0993A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service…Medium · 6.5Apr 15, 2020
CVE-2020-0992A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 15, 2020
CVE-2020-0991A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…High · 7.8Apr 15, 2020
CVE-2020-0988A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…High · 7.8Apr 15, 2020
CVE-2020-0987An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka…Medium · 5.5Apr 15, 2020
CVE-2020-0985An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows…High · 7.8Apr 15, 2020
CVE-2020-0984An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before…High · 7.8Apr 15, 2020
CVE-2020-0983An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka…High · 7.8Apr 15, 2020
CVE-2020-0982An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka…Medium · 5.5Apr 15, 2020
CVE-2020-0981A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully…High · 8.8Apr 15, 2020
CVE-2020-0980A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…High · 7.8Apr 15, 2020
CVE-2020-0979A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…High · 8.8Apr 15, 2020
CVE-2020-0978A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4Apr 15, 2020
CVE-2020-0977A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4Apr 15, 2020
CVE-2020-0976A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4Apr 15, 2020
CVE-2020-0975A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4Apr 15, 2020
CVE-2020-0974A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…High · 8.8Apr 15, 2020
CVE-2020-0973A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4Apr 15, 2020
CVE-2020-0972A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected…Medium · 5.4Apr 15, 2020