cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2020-0794A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Medium · 5.5Apr 15, 2020
CVE-2020-0784An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…High · 7.8Apr 15, 2020
CVE-2020-0760A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote…High · 8.8Apr 15, 2020
CVE-2020-0699An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…Medium · 5.5Apr 15, 2020
CVE-2020-0687A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…High · 8.8Apr 15, 2020
CVE-2020-0905An remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution…High · 8.0Mar 12, 2020
CVE-2020-0903A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request Medium · 5.4Mar 12, 2020
CVE-2020-0902An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric…Critical · 9.8Mar 12, 2020
CVE-2020-0898An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Mar 12, 2020
CVE-2020-0897An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work…High · 7.8Mar 12, 2020
CVE-2020-0896An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege…High · 7.8Mar 12, 2020
CVE-2020-0894A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4Mar 12, 2020
CVE-2020-0893A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMedium · 5.4Mar 12, 2020
CVE-2020-0892A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…High · 7.8Mar 12, 2020
CVE-2020-0891This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.Medium · 5.4Mar 12, 2020
CVE-2020-0887An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Mar 12, 2020
CVE-2020-0885An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 4.3Mar 12, 2020
CVE-2020-0884A spoofing vulnerability exists in Microsoft Visual Studio as it includes a reply URL that is not secured by SSL, aka 'Microsoft Visual…Low · 3.7Mar 12, 2020
CVE-2020-0883A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…High · 8.8Mar 12, 2020
CVE-2020-0882An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Mar 12, 2020
CVE-2020-0881A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory…High · 8.8Mar 12, 2020
CVE-2020-0880An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Mar 12, 2020
CVE-2020-0879An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory…Medium · 5.5Mar 12, 2020
CVE-2020-0877An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…High · 7.8Mar 12, 2020
CVE-2020-0876An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…High · 7.5Mar 12, 2020
CVE-2020-0874An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory…Medium · 5.5Mar 12, 2020
CVE-2020-0872A remote code execution vulnerability exists in Application Inspector version v1.0.23 or earlier when the tool reflects example code…Critical · 9.6Mar 12, 2020
CVE-2020-0871An information disclosure vulnerability exists when Windows Network Connections Service fails to properly handle objects in memory, aka…Medium · 5.5Mar 12, 2020
CVE-2020-0869A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…High · 8.8Mar 12, 2020
CVE-2020-0868An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka…High · 7.8Mar 12, 2020