Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0938A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially
- CVE-2020-0937An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation…
- CVE-2020-0936An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled…
- CVE-2020-0935An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka…
- CVE-2020-0934An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability…
- CVE-2020-0933A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0932A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2020-0931A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2020-0930A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0929A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2020-0927A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0926A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0925A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0924A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0923A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0920A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application…
- CVE-2020-0919An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries…
- CVE-2020-0918An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka…
- CVE-2020-0917An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka…
- CVE-2020-0913An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-0910A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…
- CVE-2020-0907A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…
- CVE-2020-0906A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-0900An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka…
- CVE-2020-0899An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka…
- CVE-2020-0895A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine…
- CVE-2020-0889A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database…
- CVE-2020-0888An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…
- CVE-2020-0835An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows…
- CVE-2020-0821An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…