Microsoft CVEs
14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2020-0612A denial of service vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an attacker connects to the target system…
- CVE-2020-0611A remote code execution vulnerability exists in the Windows Remote Desktop Client when a user connects to a malicious server, aka 'Remote…
- CVE-2020-0610A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to…
- CVE-2020-0609A remote code execution vulnerability exists in Windows Remote Desktop Gateway (RD Gateway) when an unauthenticated attacker connects to…
- CVE-2020-0608An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…
- CVE-2020-0607An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft…
- CVE-2020-0606A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who…
- CVE-2020-0605A remote code execution vulnerability exists in .NET software when the software fails to check the source markup of a file.An attacker who…
- CVE-2020-0603A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who…
- CVE-2020-0602A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service…
- CVE-2020-0601A spoofing vulnerability exists in the way Windows CryptoAPI (Crypt32.dll) validates Elliptic Curve Cryptography (ECC) certificates.An attac
- CVE-2019-1387An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6.
- CVE-2019-1490A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for…
- CVE-2019-1489An information disclosure vulnerability exists when the Windows Remote Desktop Protocol (RDP) fails to properly handle objects in memory…
- CVE-2019-1488A security feature bypass vulnerability exists when Microsoft Defender improperly handles specific buffers, aka 'Microsoft Defender…
- CVE-2019-1487An information disclosure vulnerability in Android Apps using Microsoft Authentication Library (MSAL) 0.3.1-Alpha or later exists under…
- CVE-2019-1486A spoofing vulnerability exists in Visual Studio Live Share when a guest connected to a Live Share session is redirected to an arbitrary…
- CVE-2019-1485A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code…
- CVE-2019-1484A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote…
- CVE-2019-1483An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this…
- CVE-2019-1481An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows…
- CVE-2019-1480An information disclosure vulnerability exists in Windows Media Player when it fails to properly handle objects in memory, aka 'Windows…
- CVE-2019-1478An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of…
- CVE-2019-1477An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer…
- CVE-2019-1476An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC) improperly handles hard links, aka 'Windows…
- CVE-2019-1474An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-1472An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel…
- CVE-2019-1471A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated…
- CVE-2019-1470An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an…
- CVE-2019-1469An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…