Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0867An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka…
- CVE-2020-0866An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work…
- CVE-2020-0865An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work…
- CVE-2020-0864An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work…
- CVE-2020-0863An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information…
- CVE-2020-0861An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To…
- CVE-2020-0860An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this…
- CVE-2020-0859An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules…
- CVE-2020-0858An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit…
- CVE-2020-0857An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0855A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-0854An elevation of privilege vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions, aka…
- CVE-2020-0853An information disclosure vulnerability exists in Windows when the Windows Imaging Component fails to properly handle objects in memory…
- CVE-2020-0852A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-0851A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-0850A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft…
- CVE-2020-0849An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege…
- CVE-2020-0848A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0847A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2020-0845An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…
- CVE-2020-0844An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations…
- CVE-2020-0843An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem…
- CVE-2020-0842An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem…
- CVE-2020-0841An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege…
- CVE-2020-0840An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege…
- CVE-2020-0834An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC).An attacker…
- CVE-2020-0833A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2020-0832A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2020-0831A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0830A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…