Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0795This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.
- CVE-2020-0793An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka…
- CVE-2020-0791An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…
- CVE-2020-0789A denial of service vulnerability exists when the Visual Studio Extension Installer Service improperly handles hard links, aka 'Visual…
- CVE-2020-0788An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0787An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic l
- CVE-2020-0786A denial of service vulnerability exists when the Windows Tile Object Service improperly handles hard links, aka 'Windows Tile Object…
- CVE-2020-0785An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows…
- CVE-2020-0783An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in…
- CVE-2020-0781An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP) service improperly handles objects in…
- CVE-2020-0780An elevation of privilege vulnerability exists in the way that the Windows Network List Service handles objects in memory, aka 'Windows…
- CVE-2020-0779An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer…
- CVE-2020-0778An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory, aka…
- CVE-2020-0777An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work…
- CVE-2020-0776An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles file operations.To exploit this…
- CVE-2020-0775An information disclosure vulnerability exists when Windows Error Reporting improperly handles file operations.To exploit this…
- CVE-2020-0774An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…
- CVE-2020-0773An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this…
- CVE-2020-0772An elevation of privilege vulnerability exists when Windows Error Reporting improperly handles memory.To exploit this vulnerability, an…
- CVE-2020-0771An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an…
- CVE-2020-0770An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this…
- CVE-2020-0769An elevation of privilege vulnerability exists when the Windows CSC Service improperly handles memory.To exploit this vulnerability, an…
- CVE-2020-0768A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka…
- CVE-2020-0765An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML…
- CVE-2020-0763An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the…
- CVE-2020-0762An elevation of privilege vulnerability exists when Windows Defender Security Center handles certain objects in memory.To exploit the…
- CVE-2020-0758An elevation of privilege vulnerability exists when Azure DevOps Server and Team Foundation Services improperly handle pipeline job…
- CVE-2020-0700A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure…
- CVE-2020-0690An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…
- CVE-2020-0684A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An…