cve.nowby Sazabi

Microsoft CVEs

14,257 CVEs and advisories name Microsoft as an affected vendor, 292 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.

CVE-2019-1468A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…High · 8.8Dec 10, 2019
CVE-2019-1467An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Dec 10, 2019
CVE-2019-1466An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Dec 10, 2019
CVE-2019-1465An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Dec 10, 2019
CVE-2019-1464An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel…Medium · 5.5Dec 10, 2019
CVE-2019-1463An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory…Medium · 5.5Dec 10, 2019
CVE-2019-1462A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in…High · 7.8Dec 10, 2019
CVE-2019-1461A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka…Medium · 6.5Dec 10, 2019
CVE-2019-1458An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k High · 7.8KEVDec 10, 2019
CVE-2019-1453A denial of service vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and…High · 7.5Dec 10, 2019
CVE-2019-1400An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory…Medium · 5.5Dec 10, 2019
CVE-2019-1332A cross-site scripting (XSS) vulnerability exists when Microsoft SQL Server Reporting Services (SSRS) does not properly sanitize a…Medium · 6.1Dec 10, 2019
CVE-2019-1457A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document, aka…High · 7.8Nov 12, 2019
CVE-2019-1456A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles specially…High · 8.8Nov 12, 2019
CVE-2019-1449A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which…Critical · 9.8Nov 12, 2019
CVE-2019-1448A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka…High · 7.8Nov 12, 2019
CVE-2019-1447A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka…Medium · 5.4Nov 12, 2019
CVE-2019-1446An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel…Medium · 5.5Nov 12, 2019
CVE-2019-1445A spoofing vulnerability exists when Office Online does not validate origin in cross-origin communications handlers correctly, aka…Medium · 5.4Nov 12, 2019
CVE-2019-1443An information disclosure vulnerability exists in Microsoft SharePoint when an attacker uploads a specially crafted file to the SharePoint…Medium · 6.5Nov 12, 2019
CVE-2019-1442A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially…Medium · 5.5Nov 12, 2019
CVE-2019-1441A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka…High · 8.8Nov 12, 2019
CVE-2019-1440An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…Medium · 5.5Nov 12, 2019
CVE-2019-1439An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka…Medium · 6.5Nov 12, 2019
CVE-2019-1438An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Nov 12, 2019
CVE-2019-1437An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Nov 12, 2019
CVE-2019-1436An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information…Medium · 5.5Nov 12, 2019
CVE-2019-1435An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Nov 12, 2019
CVE-2019-1434An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory…High · 7.8Nov 12, 2019
CVE-2019-1433An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows…High · 7.8Nov 12, 2019