Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0971A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2020-0970A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0969A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge…
- CVE-2020-0968A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip
- CVE-2020-0967A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-0966A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-0965A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft…
- CVE-2020-0964A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…
- CVE-2020-0962An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
- CVE-2020-0961A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory…
- CVE-2020-0960A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-0959A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-0958An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-0957An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-0956An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-0955An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows…
- CVE-2020-0954A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0953A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-0952An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2020-0950A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…
- CVE-2020-0949A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…
- CVE-2020-0948A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…
- CVE-2020-0947An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation…
- CVE-2020-0946An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation…
- CVE-2020-0945An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation…
- CVE-2020-0944An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations…
- CVE-2020-0943An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application…
- CVE-2020-0942An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations…
- CVE-2020-0940An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows…
- CVE-2020-0939An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation…