Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0731An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0730An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows…
- CVE-2020-0729A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An…
- CVE-2020-0728An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules…
- CVE-2020-0727An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file…
- CVE-2020-0726An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0725An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0724An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0723An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0722An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0721An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0720An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0719An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0717An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
- CVE-2020-0716An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
- CVE-2020-0715An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…
- CVE-2020-0714An information disclosure vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Information Disclosure…
- CVE-2020-0713A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0712A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0711A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0710A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
- CVE-2020-0709An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege…
- CVE-2020-0708A remote code execution vulnerability exists when the Windows Imaging Library improperly handles memory.To exploit this vulnerability, an…
- CVE-2020-0707An elevation of privilege vulnerability exists when the Windows IME improperly handles memory.To exploit this vulnerability, an attacker…
- CVE-2020-0706An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft…
- CVE-2020-0705An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To…
- CVE-2020-0704An elevation of privilege vulnerability exists when the Windows Wireless Network Manager improperly handles memory.To exploit this…
- CVE-2020-0703An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this…
- CVE-2020-0702A security feature bypass vulnerability exists in Surface Hub when prompting for credentials, aka 'Surface Hub Security Feature Bypass…
- CVE-2020-0701An elevation of privilege vulnerability exists in the way that the Windows Client License Service (ClipSVC) handles objects in memory, aka…