Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0644An elevation of privilege vulnerability exists when Microsoft Windows implements predictable memory section names, aka 'Windows Elevation…
- CVE-2020-0643An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in…
- CVE-2020-0642An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0641An elevation of privilege vulnerability exists in Windows Media Service that allows file creation in arbitrary locations.To exploit the…
- CVE-2020-0640A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka 'Internet Explorer Memory…
- CVE-2020-0639An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle…
- CVE-2020-0638An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an at
- CVE-2020-0637An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information, aka 'Remote…
- CVE-2020-0636An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for…
- CVE-2020-0635An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka…
- CVE-2020-0634An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory…
- CVE-2020-0633An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0632An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0631An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0630An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0629An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0628An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0627An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0626An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0625An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0624An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka…
- CVE-2020-0623An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0622An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka…
- CVE-2020-0621A security feature bypass vulnerability exists in Windows 10 when third party filters are called during a password update, aka 'Windows…
- CVE-2020-0620An elevation of privilege vulnerability exists when Microsoft Cryptographic Services improperly handles files, aka 'Microsoft…
- CVE-2020-0617A denial of service vulnerability exists when Microsoft Hyper-V Virtual PCI on a host server fails to properly validate input from a…
- CVE-2020-0616A denial of service vulnerability exists when Windows improperly handles hard links, aka 'Microsoft Windows Denial of Service…
- CVE-2020-0615An information disclosure vulnerability exists in the Windows Common Log File System (CLFS) driver when it fails to properly handle…
- CVE-2020-0614An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…
- CVE-2020-0613An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search…