Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0665An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the…
- CVE-2020-0663An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an…
- CVE-2020-0662A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka 'Windows Remote Code Execution…
- CVE-2020-0661A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate input from a privileged user…
- CVE-2020-0660A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and…
- CVE-2020-0659An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data…
- CVE-2020-0658An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle…
- CVE-2020-0657An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory…
- CVE-2020-0655A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated…
- CVE-2020-0618A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Micr
- CVE-2019-1353An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.
- CVE-2019-1348An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.
- CVE-2019-1460A spoofing vulnerability exists in the way Microsoft Outlook for Android software parses specifically crafted email messages, aka 'Outlook…
- CVE-2019-1454An elevation of privilege vulnerability exists when the Windows User Profile Service (ProfSvc) improperly handles symlinks, aka 'Windows…
- CVE-2019-1414An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer, aka…
- CVE-2019-1354A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code…
- CVE-2019-1352A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code…
- CVE-2019-1351A tampering vulnerability exists when Git for Visual Studio improperly handles virtual drive paths, aka 'Git for Visual Studio Tampering…
- CVE-2019-1350A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code…
- CVE-2019-1349A remote code execution vulnerability exists when Git for Visual Studio improperly sanitizes input, aka 'Git for Visual Studio Remote Code…
- CVE-2018-8654An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege…
- CVE-2019-9510Microsoft Windows RDP can bypass the Windows lock screen
- CVE-2020-0656A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web…
- CVE-2020-0654A security feature bypass vulnerability exists in Microsoft OneDrive App for Android.This could allow an attacker to bypass the passcode…
- CVE-2020-0653A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-0652A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory…
- CVE-2020-0651A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-0650A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…
- CVE-2020-0647A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications correctly, aka 'Microsoft…
- CVE-2020-0646A remote code execution vulnerability exists when the Microsoft .NET Framework fails to validate input properly, aka '.NET Framework Remote