Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0645A tampering vulnerability exists when Microsoft IIS Server improperly handles malformed request headers, aka 'Microsoft IIS Server…
- CVE-2020-0792An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…
- CVE-2020-0767A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0759A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-0757An elevation of privilege vulnerability exists when Windows improperly handles Secure Socket Shell remote commands, aka 'Windows SSH…
- CVE-2020-0756An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects…
- CVE-2020-0755An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects…
- CVE-2020-0754An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error…
- CVE-2020-0753An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files, aka 'Windows Error…
- CVE-2020-0752An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0751A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from a…
- CVE-2020-0750An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-0749An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-0748An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects…
- CVE-2020-0747An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data…
- CVE-2020-0746An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…
- CVE-2020-0745An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…
- CVE-2020-0744An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in memory…
- CVE-2020-0743An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-0742An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-0741An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-0740An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory, aka…
- CVE-2020-0739An elevation of privilege vulnerability exists in the way that the dssvc.dll handles file creation allowing for a file overwrite or…
- CVE-2020-0738A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…
- CVE-2020-0737An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows Elevation of…
- CVE-2020-0736An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2020-0735An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0734A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2020-0733An elevation of privilege vulnerability exists when the Windows Malicious Software Removal Tool (MSRT) improperly handles junctions.To…
- CVE-2020-0732An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…