Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0698An information disclosure vulnerability exists when the Telephony Service improperly discloses the contents of its memory, aka 'Windows…
- CVE-2020-0697An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited…
- CVE-2020-0696A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka…
- CVE-2020-0695A spoofing vulnerability exists when Office Online Server does not validate origin in cross-origin communications correctly, aka…
- CVE-2020-0694A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0693A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web reques
- CVE-2020-0692An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege…
- CVE-2020-0691An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…
- CVE-2020-0689A security feature bypass vulnerability exists in secure boot, aka 'Microsoft Secure Boot Security Feature Bypass Vulnerability'.
- CVE-2020-0688A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, ak
- CVE-2020-0686An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer…
- CVE-2020-0685An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of…
- CVE-2020-0683An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Ele
- CVE-2020-0682An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka…
- CVE-2020-0681A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2020-0680An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka…
- CVE-2020-0679An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka…
- CVE-2020-0678An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links, aka 'Windows Error…
- CVE-2020-0677An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects…
- CVE-2020-0676An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects…
- CVE-2020-0675An information disclosure vulnerability exists in the Cryptography Next Generation (CNG) service when it fails to properly handle objects…
- CVE-2020-0674A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip
- CVE-2020-0673A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka…
- CVE-2020-0672An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-0671An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-0670An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel…
- CVE-2020-0669An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation…
- CVE-2020-0668An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation…
- CVE-2020-0667An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0666An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…